CVE-2026-43946

Name of the Vulnerable Software and Affected Versions FUXA versions prior to 1.3.1

Description An authorization bypass exists in the /api/getTagValue endpoint, allowing unauthenticated access to tag values. This occurs when the referenced script does not exist, causing the isAuthorisedByScriptName() function to return true. The issue stems from the system creating a signed guest token when no x-access-token is provided, which then allows the request to proceed as a guest. If the sourceScriptName is omitted or does not match a real script, the authorization check is bypassed, and the endpoint returns arbitrary tag values by ID.

Recommendations Update to version 1.3.1. Restrict access to the /api/getTagValue endpoint to minimize the risk of exploitation.