CVE-2026-18275
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium (through 26.04.1) allows a remote authenticated user to run segmentation and transcription against other users' document parts, overwriting their content, via part primary keys supplied to a many=True related field whose queryset restriction was applied to the ManyRelatedField instead of its child_relation and therefore had no effect.
Risk Assessment
An authenticated user can modify or overwrite other users' data, leading to data integrity loss and potential sabotage. This may also breach confidentiality if data is overwritten in an undesirable manner.
Recommendation
It is recommended to upgrade eScriptorium to a patched version if available. Also, verify the correctness of queryset restrictions in serializers and ensure they are applied to the appropriate fields.
Other vulnerabilities in eScriptorium
Original NVD description (English source)
Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segmentation and transcription against other users' document parts, overwriting their content, via part primary keys supplied to a many=True related field whose queryset restriction was applied to the ManyRelatedField instead of its child_relation and therefore had no effect
Vulnerability data from NVD (NIST) · CISA KEV · EPSS