CVE-2026-86120

Name of the Vulnerable Software and Affected Versions APITable versions prior to 1.13.0-beta.1

Description An incorrect authorization issue exists in the NodePermissionGuard component. The system fails to enforce node-level access control when permission lookups trigger exceptions. This allows attackers possessing valid Fusion API tokens to write attachments to private datasheets, even if they have been explicitly denied access, by triggering an unhandled exception within the permission guard.

Recommendations Update to a version later than 1.13.0-beta.1.