Unknown · Deepstream · CVE-2026-49252
**Name of the Vulnerable Software and Affected Versions**
deepstream versions prior to 10.0.5
**Description**
A Prototype Pollution issue exists in the server, which allows clients and backend services to synchronize data, send messages, and make remote procedure calls (RPCs) at scale. Prototype Pollution occurs when an attacker can manipulate the prototype of an object, potentially altering the behavior of the application. This can lead to privilege escalation for any authenticated user who possesses write permissions to any record.
**Recommendations**
Update to version 10.0.5.