CVE-2026-40867CWE-284CWE-639

Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulation

High · published April 21, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, a broken access control vulnerability in the helpdesk attachment viewer allows any authenticated user to view attachments from other tickets by changing the attachment ID. This can expose sensitive support files and internal documents across unrelated users or teams.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00351 · 27.5th percentile
Weaknesses
CWE-284 · Improper Access Control; CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-04-21T18:16Z
EPSS history
Timeline
  • 21 APR 18:16Z
    Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulation
    cvelistv5