Vulnerability details
CVE-2026-72741
goodrain rainbond
Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access
CVSS 4.0
8.6High
Official description
Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use any valid API token to bypass enterprise ID verification and access or modify another enterprise's services, plugins, environment variables, and certificates.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.6High | 4.0 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
| 8.1High | 3.1 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| goodrain | rainbond | v ≤ 6.9.7 | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://github.com/goodrain/rainbond/issues/2665 technical-descriptionexploitissue-tracking
- https://www.vulncheck.com/advisories/rainbond-region-api-cross-enterprise-idor-via-tenant-access third-party-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-08-13
- Last updated
- 2026-08-18
- State
- Published
- Assigner (CNA)
- VulnCheck
Exploit prediction (EPSS)
0.25%
Probability of exploitation in 30 days
17.3%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Proof of concept
- Technical impact
- Total
Weaknesses (CWE)
- CWE-639Authorization Bypass Through User-Controlled Key