CVE-2026-44595CWE-862

Yamcs: Unauthorized user enumeration via IAM API endpoints

Medium · published July 16, 2026

CVSS v3.1
4.3
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java, so any authenticated user, even one with low or no privileges, could enumerate all user accounts in the system including their usernames, superuser status, and group memberships. This issue is fixed in versions 5.12.7 and 5.13.0.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01057 · 64.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-07-16T16:02Z
EPSS history
Timeline
  • 16 JUL 16:02Z
    Yamcs: Unauthorized user enumeration via IAM API endpoints
    cvelistv5