VULNRABLE / Vulnerability / CVE-2026-59185
CVE-2026-59185
HIGH LOW github.com/identrail/identrail GHSA
Exploit verdict: No active-exploit signal
CVSS Score
8
Severity
HIGH
EPSS
—
Source
GHSA
Summary
Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification
What this means
CVE-2026-59185 is a high-severity vulnerability affecting github.com/identrail/identrail, rated CVSS 8. Published September 10, 2026.
View full advisory at GHSA →