CVE-2026-76236

Name of the Vulnerable Software and Affected Versions stigmem-node versions prior to 0.9.0a12

Description A broken object level authorization (BOLA) flaw exists in the right-to-be-forgotten (RTBF) tombstone mechanism. The issue tombstone function defaulted the tenant to "default" instead of the caller's tenant, which allowed deletion records to be written to the incorrect tenant. Additionally, the read-suppression path, specifically get tombstone filter and the tombstone scope cache, lacked a tenant id predicate, causing tombstone suppression to be applied without tenant differentiation across fact queries and provenance reads. This could result in a tenant's deletion being attributed to the wrong tenant, potentially hiding facts belonging to other tenants or failing to hide facts within the correct tenant, thereby undermining data isolation and RTBF guarantees. This issue only affects multi-tenant deployments using the opt-in stigmem-plugin-multi-tenant.

Recommendations Update stigmem-node to version 0.9.0a12.