axelor-open-platform vulnerabilities

CVEs whose affected-version data names the axelor-open-platform package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-63085High· 8.8PoC

3mo ago

Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence

Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operat…

▾ Midnightaxelor · axelor-open-platformEPSS 0.54%via CVEORG