CVE-2026-52466

Name of the Vulnerable Software and Affected Versions Open Library Foundation VuFind version 11.0.3 Open Library Foundation VuFind version 4.1

Description Incorrect access control exists where the application fails to stop processing incoming requests within the validateAccessPermission() function of VuFindControllerAbstractBase. Although the system returns a response indicating that access was denied, the requested function is still executed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.