Warracker vulnerabilities

CVEs whose affected-version data names the Warracker package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120463Medium· 6.5PoC

6d ago

Warracker before 1.0.4 Missing Authorization via Paperless-ngx Document Linking

Warracker before 1.0.4 contains a missing authorization vulnerability in its Paperless-ngx integration that allows an authenticated, non-administrative user to bypass document ownership restrictions by searching for and linking another u…

▾ Twilightsassanix · WarrackerEPSS 0.31%via CVEORG