high8.8
CVE-2026-16753
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or devel…
Impact
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.
Affected products
| Product | Affected versions |
|---|---|
| Lowcoder Version | through 2.4.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.