---
id: CVE-2026-119599
title: >-
  AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key
  Scopes
summary: >-
  AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability
  that allows project users to assign system-level scopes by creating
  service_account API keys with unvalidated scopes. Attackers holding
  write_api_keys can mint ke…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-266
vendor: looplj
product: AxonHub
affected:
  - AxonHub <= 1.0.0-beta11
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-30T14:06:47.047096Z'
exploitAvailable: true
published: '2026-10-30'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T14:07:11.920Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-119599'
references:
  - url: >-
      https://github.com/looplj/axonhub/commit/e5c904efbdabd80d74827dfae478330339c5a514
  - url: 'https://github.com/looplj/axonhub/pull/2741'
  - url: 'https://github.com/looplj/axonhub/issues/2724'
  - url: >-
      https://github.com/looplj/axonhub/blob/v1.0.0-beta11/internal/server/biz/api_key.go#L340
  - url: >-
      https://github.com/looplj/axonhub/blob/v1.0.0-beta11/internal/server/biz/api_key.go#L448
  - url: >-
      https://hackmd.io/@hieuPenguinnn/axonhub-apikey-scope-grant-privilege-escalation
  - url: 'https://github.com/looplj/axonhub'
  - url: >-
      https://www.vulncheck.com/advisories/axonhub-through-1.0.0-beta11-privilege-escalation-via-service-account-api-key-scopes
    label: >-
      VulnCheck Advisory: AxonHub through 1.0.0-beta11 Privilege Escalation via
      Service Account API Key Scopes
tags:
  - cve.org
  - exploit-available
epss: 0.0041
epssPercentile: 0.35438
ingestedAt: '2026-11-05T16:07:30.278Z'
---

## Overview

AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating service_account API keys with unvalidated scopes. Attackers holding write_api_keys can mint keys with read_channels and query /admin/graphql to read every channel's configuration, including base URLs and model lists.

## Affected

- `AxonHub <= 1.0.0-beta11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.