CVE-2026-111024
HIGH
NVD
CVSS Score
7.1
Severity
HIGH
Published
Nov 11, 2026
Vendor
unknown
Description
A user with the Viewer or Editor role could bypass folder permissions on Git Sync managed resources through the repository files API: a Viewer could read files in folders they could not access, and an Editor could create, modify, move or delete provisioned dashboards and folders there (incorrect authorization).