Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2026-26004

Sentry allows unauthorized access to event data across organizational boundaries

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

getsentry sentry

  • < 26.1.0affected

References