{"uuid": "e4fc98c9-1f32-4d06-bb73-8f53d790cf47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-106501", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117403407182699657", "content": "CVE-2026-106501: @backstage/plugin-scaffolder-backend CRITICAL vuln (CVSS 9.6) allows authenticated users to access other users\u2019 task data, incl. credentials. Patch to 4.1.0 now. Restrict task read perms as interim measure. https://radar.offseq.com/threat/plugin-scaffolder-backend-backstage-sensitive-information-exposure-in-scaffolder-cve-2026-106501-af878d1e8ab7288a #OffSeq #Backstage #Vuln", "creation_timestamp": "2026-10-08T04:30:26.115427Z"}