StudioCMS has Authorization Bypass Through User-Controlled Key

Description

StudioCMS contains a Broken Object Level Authorization (BOLA) vulnerability in the Content Management feature that allows users with the “Visitor” role to access draft content created by Editor/Admin/Owner users.

Recommendation

Update the studiocms package to the latest compatible version. Followings are version details:

Affected version(s): < 0.2.0
Patched version(s): 0.2.0

References

GHSA-8cw6-53m5-4932
CVE-2026-24134
CWE-639
CWE-862
CAPEC-310
OWASP 2021-A1
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for StudioCMS has Authorization Bypass Through User-Controlled Key and gives you actionable findings to investigate.

Start a free scan

Related Issues

Authorization Bypass Through User-Controlled Key in urijs - CVE-2022-0613
Authorization Bypass Through User-Controlled Key in url-parse - CVE-2022-0686
OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header that leads to cross‑tenant data ex - CVE-2026-30956
StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check - CVE-2026-32101

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

10 Secure Coding Best Practices to Follow in Every Project

Update Cheat Sheet for Developers

See something that needs correcting? Let us knowUpdated January 29, 2026