Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-15541

will-moss Isaiah Master Websocket server.go Server.Handle authorization

Description

A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.Handle of the file app/server/server/server.go of the component Master Websocket Handler. Executing a manipulation of the argument Agent can lead to missing authorization. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

will-moss Isaiah

  • 1.36.0affected
  • 1.36.1affected
  • 1.36.2affected
  • 1.36.3affected
  • 1.36.4affected
  • 1.36.5affected
  • 1.36.6affected
  • 1.36.7affected
  • 1.36.8affected
  • 1.36.9affected

References