Critical · published December 19, 2025
🚨 A sneaky oversight has left Glutton V1 service endpoints wide open for business! 🛒 Anyone could access sensitive data without a password — yikes! Think of it as a restaurant with no front door — anyone can waltz in, grab a meal, or even rearrange the kitchen without a reservation. That's exactly what was happening with these Gotham stacks! An attacker could have strolled right into your data kitchen, reading, updating, or even deleting anything they wanted! This could have led to absolutely devastating data breaches or unauthorized manipulations, all while you had no idea! 🔥
Think of it as a restaurant with no front door — anyone can waltz in, grab a meal, or even rearrange the kitchen without a reservation. That's exactly what was happening with these Gotham stacks! This vulnerability allowed unauthenticated access to the Glutton V1 service endpoints, enabling users without proper permissions to directly interact with the backend and manipulate data. It’s a classic case of a security hole that should have never been left unguarded.
An attacker could have strolled right into your data kitchen, reading, updating, or even deleting anything they wanted! This could have led to absolutely devastating data breaches or unauthorized manipulations, all while you had no idea! 🔥 Patch your Gotham stacks if you haven’t yet, or ensure that your Apollo-managed instances are now updated to the latest secure version. Review access controls to ensure that only authenticated users can interact with sensitive endpoints moving forward. You’ve got this! With these steps, you’ll have your data fortress secured in no time! 🛡️