CVE-2026-59255

Name of the Vulnerable Software and Affected Versions BloodHound versions prior to 9.4.1

Description An authorization flaw exists in the custom-nodes API endpoints. Authenticated users with valid session tokens can modify the global graph schema by performing unprotected POST, PUT, and DELETE operations on the custom-nodes endpoints. This allows the creation, update, or deletion of custom node types, which impacts all users and tenants.

Recommendations Update BloodHound to the version containing commit 8f79035. Restrict access to the custom-nodes API endpoints to authorized administrators only.