Vulnerability Description
In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authentication or authorisation check. An unauthenticated attacker who supplies another user's uniqueId can retrieve that user's stored personal details (username, first name, last name and email address) within the same institution.
Related Weaknesses (CWE)
References
- https://github.com/openequella/openEQUELLA/security/advisories/GHSA-mxj9-pmpw-j4
- https://openequella.github.io/guides/
FAQ
What is CVE-2026-66091?
CVE-2026-66091 is a documented vulnerability. In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authentication or authorisation check. An unauthenticated attacker who supplies another user's uniqueId can ret...
How severe is CVE-2026-66091?
CVSS scoring is not yet available for CVE-2026-66091. Check NVD for updates.
Is there a patch for CVE-2026-66091?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.