CVE-2026-15541

Description

A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.Handle of the file app/server/server/server.go of the component Master Websocket Handler. Executing a manipulation of the argument Agent can lead to missing authorization. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.

CVSS Vector

References

• https://github.com/will-moss/isaiah/
• https://github.com/will-moss/isaiah/issues/34
• https://github.com/will-moss/isaiah/pull/35
• https://vuldb.com/cve/CVE-2026-15541
• https://vuldb.com/submit/855074
• https://vuldb.com/vuln/377891
• https://vuldb.com/vuln/377891/cti