CVE-2026-111653Published
53AIHub through 0.5.3 Missing Authentication via PUT /api/enterprises/:id
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111653 · Microsoft / collected KEV context
cve-program · CVE-2026-111653
- https://hackmd.io/@hieuPenguinnn/53aihub-unauth-cross-tenant-enterprise-update
- https://github.com/53AI/53AIHub/blob/v0.5.3/api/router/api.go#L54-L66
- https://github.com/53AI/53AIHub/blob/v0.5.3/api/controller/enterprise.go#L122-L160
- https://www.vulncheck.com/advisories/53aihub-through-0.5.3-missing-authentication-via-put-api-enterprises-id
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.