Vulnerability Description
OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to impersonate gateways in other realms because GatewayService only checks the gateway ID, not the realm. Attackers with WRITE:ADMIN in one realm can create a service user named after another realm's gateway ID to overwrite its descendant assets and open SSH tunnels into its local network.
Related Weaknesses (CWE)
References
- https://github.com/openremote/core/security/advisories/GHSA-2j4x-qh6q-q8mm
- https://www.vulncheck.com/advisories/openremote-before-1.31.0-cross-realm-gatewa
FAQ
What is CVE-2026-116184?
CVE-2026-116184 is a documented vulnerability. OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to impersonate gateways in other realms because GatewayService only checks the gateway ID, not the real...
How severe is CVE-2026-116184?
CVSS scoring is not yet available for CVE-2026-116184. Check NVD for updates.
Is there a patch for CVE-2026-116184?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.