CVE-2026-94149

Name of the Vulnerable Software and Affected Versions Omega Solution HRM OS versions prior to 20260717

Description An issue exists in the Role Permission Retrieval Endpoint within the /role-permission/permission file. Remote manipulation of the roleId argument allows for improper control of resource identifiers, which occurs when a system fails to properly validate that a user is authorized to access a specific resource identifier.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the roleId argument in the /role-permission/permission endpoint to minimize the risk of exploitation.