CVE-2026-15541

Name of the Vulnerable Software and Affected Versions will-moss Isaiah versions prior to 1.37.0

Description A flaw in the Master Websocket Handler component allows remote attackers to bypass authorization. The issue exists within the Server.Handle() function located in the app/server/server/server.go file, where improper handling of the Agent argument enables the missing authorization.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.