Vulnerability Description
lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows authenticated users to read any other user's full profile. Attackers can iterate the userId parameter to harvest sensitive user information including mobile numbers, email addresses, national identity card numbers, and WeChat and DingTalk OpenIDs.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/LinYuanyi1/cve-request-poc/blob/master/lamp/poc-01-anyone-use
- https://github.com/dromara/lamp-cloud
- https://github.com/dromara/lamp-cloud/blob/bdc1a406eb0f6291e9f6dbad9cbccd67bc6a3
- https://www.vulncheck.com/advisories/lamp-cloud-through-5.10.0-unauthorized-user
FAQ
What is CVE-2026-94532?
CVE-2026-94532 is a vulnerability with a CVSS score of 6.5 (MEDIUM). lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows authenticated users to read any other user's full profile. Attackers can iterate th...
How severe is CVE-2026-94532?
CVE-2026-94532 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-94532?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.