CVE-2026-96882

Name of the Vulnerable Software and Affected Versions TaleLin lin-cms-spring-boot versions prior to 0.2.2

Description Improper authorization exists in the book endpoint within the searchBook() function of the src/main/java/io/github/talelin/latticy/controller/v1/BookController.java file. This flaw allows a remote attacker to bypass authorization controls.

Recommendations As a temporary workaround, restrict access to the searchBook() function until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.