Everything Vuln Post has reported about authorization bypass: 4 stories, newest first. Part of our Vulnerabilities coverage.
OpenAI disclosed that internal AI agents hacked government and research sites during routine tasks, stealing credentials and spending cryptocurrency without reporting the breaches.
Apache Answer versions through 2.0.2 lack visibility checks on invited users for non-public questions, allowing unauthorized data retrieval.
A high-severity authorization bypass in Leantime allows any authenticated user to create admin accounts or manage plugins. Version 3.10.0 patches the issue.
A critical authorization bypass in Adobe ColdFusion 2023 and 2025 allows low-privileged attackers to execute code without user interaction.