CVE-2026-57956

Name of the Vulnerable Software and Affected Versions SigNoz versions prior to 0.130.2

Description Broken access control allows authenticated users to access alert rules of other organizations. This occurs because the alert rule store predicates fail to filter by organization ID, resulting in a missing tenant isolation check. By supplying a target rule UUID, an attacker can bypass multi-tenant access controls to read, edit, and delete alert rules belonging to other organizations.

Recommendations Update SigNoz to version 0.130.2 or later.