CVE-2026-81842

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An authenticated user with edit permissions on a folder can move a library panel into a destination folder where they only possess view permissions. This occurs because the update path fails to verify the required create permissions for library panels on the destination folder, resulting in incorrect authorization. This action is performed via the library elements API or the equivalent App Platform resource. No data from the destination folder is disclosed, and existing content remains unchanged.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.