CVE-2026-45330 (decidim-verifications): Decidim - Verification admins can access supplied IDs from other organizations
21-Jul-2026 2
Originally appeared on RubySec.## Description The verification admin mutation flow allows accessing, verifying, and rejecting participants records from another tenant. ## Impact A tenant admin can access, reject or approve another tenant's `id_documents` requests. ## Credits T...
CVE-2026-45330 (decidim-verifications): Decidim - Verification admins can access supplied IDs from other organizations #ruby #rubydeveloper #rubyonrails #ruby #rubyonrails #programming #webdev #cve-2026-45330 #(decidim-verifications): https://www.rubyonrails.ba/link/cve-2026-45330-decidim-verifications-decidim-verification-admins-can-access-supplied-ids-from-other-organizations
