AxonHub vulnerabilities

CVEs whose affected-version data names the AxonHub package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119599Medium· 4.3PoC

1w ago

AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes

AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating service_account API keys with unvalidated scopes. Attackers holding write_api_keys can mint ke…

▾ Twilightlooplj · AxonHubEPSS 0.41%via CVEORG