CVE-2026-49439
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Sep 11, 2026
Vendor
unknown
Description
OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoint allows users with only `read:assets` privileges to write predicted datapoints. Version 1.24.1 fixes the issue.