CVE-2026-13721
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Nov 11, 2026
Vendor
unknown
Description
A user with edit access to one folder could modify, move or delete Git Sync provisioned resources in folders where they only had view access, through the provisioning files API (incorrect authorization).