PT-2026-57647 · Will Moss · Isaiah

Dem0000000 · Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-15541

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.Handle of the file app/server/server/server.go of the component Master Websocket Handler. Executing a manipulation of the argument Agent can lead to missing authorization. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.

Fix

Incorrect Authorization

Missing Authorization

Weakness Enumeration

CWE-863

CWE-862

Related Identifiers

CVE-2026-15541

Affected Products

Isaiah

References · 8

• https://github.com/will-moss/isaiah/pull/35 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-15541 · Security Note
• https://github.com/will-moss/isaiah/issues/34 · Note
• https://vuldb.com/vuln/377891 · Note
• https://vuldb.com/submit/855074 · Note
• https://github.com/will-moss/isaiah · Note
• https://vuldb.com/vuln/377891/cti · Note
• https://vuldb.com/cve/CVE-2026-15541 · Note