GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-55178 · Microsoft / collected KEV context

EUVD-2026-78775

GHSA-p23g-mvhj-jh3j

PYSEC-2026-3662

PYSEC-2026-3663

cve-program · CVE-2026-55178

• https://github.com/geolens-io/geolens/security/advisories/GHSA-p23g-mvhj-jh3j
• https://github.com/geolens-io/geolens/pull/234
• https://github.com/geolens-io/geolens/pull/235
• https://github.com/geolens-io/geolens/pull/236
• https://github.com/geolens-io/geolens/pull/237
• https://github.com/geolens-io/geolens/pull/238
• https://github.com/geolens-io/geolens/commit/01bc87da03a5ecd0322c42388f4bfced7cb2ed06
• https://github.com/geolens-io/geolens/commit/07dfb1c63ecfc065c0c47b7718ec6ebe97798b1e
• https://github.com/geolens-io/geolens/commit/2c031da8e753639ff0e36d47ca05bbb96fbe4a9e
• https://github.com/geolens-io/geolens/commit/31a103b96b9fd6ad90308b3e27a581852c4a69bd
• https://github.com/geolens-io/geolens/commit/407c068836058fdeca6bb477d39f841316b326a5
• https://github.com/geolens-io/geolens/releases/tag/v1.2.3

euvd · EUVD-2026-78775

• https://github.com/geolens-io/geolens/security/advisories/GHSA-p23g-mvhj-jh3j
• https://github.com/geolens-io/geolens/pull/234
• https://github.com/geolens-io/geolens/pull/235
• https://github.com/geolens-io/geolens/pull/236
• https://github.com/geolens-io/geolens/pull/237
• https://github.com/geolens-io/geolens/pull/238
• https://github.com/geolens-io/geolens/commit/01bc87da03a5ecd0322c42388f4bfced7cb2ed06
• https://github.com/geolens-io/geolens/commit/07dfb1c63ecfc065c0c47b7718ec6ebe97798b1e
• https://github.com/geolens-io/geolens/commit/2c031da8e753639ff0e36d47ca05bbb96fbe4a9e
• https://github.com/geolens-io/geolens/commit/31a103b96b9fd6ad90308b3e27a581852c4a69bd
• https://github.com/geolens-io/geolens/commit/407c068836058fdeca6bb477d39f841316b326a5
• https://github.com/geolens-io/geolens/releases/tag/v1.2.3

nvd · CVE-2026-55178

• https://github.com/geolens-io/geolens/commit/01bc87da03a5ecd0322c42388f4bfced7cb2ed06
• https://github.com/geolens-io/geolens/commit/07dfb1c63ecfc065c0c47b7718ec6ebe97798b1e
• https://github.com/geolens-io/geolens/commit/2c031da8e753639ff0e36d47ca05bbb96fbe4a9e
• https://github.com/geolens-io/geolens/commit/31a103b96b9fd6ad90308b3e27a581852c4a69bd
• https://github.com/geolens-io/geolens/commit/407c068836058fdeca6bb477d39f841316b326a5
• https://github.com/geolens-io/geolens/pull/234
• https://github.com/geolens-io/geolens/pull/235
• https://github.com/geolens-io/geolens/pull/236
• https://github.com/geolens-io/geolens/pull/237
• https://github.com/geolens-io/geolens/pull/238
• https://github.com/geolens-io/geolens/releases/tag/v1.2.3
• https://github.com/geolens-io/geolens/security/advisories/GHSA-p23g-mvhj-jh3j

osv · GHSA-p23g-mvhj-jh3j

• https://github.com/geolens-io/geolens/security/advisories/GHSA-p23g-mvhj-jh3j
• https://github.com/geolens-io/geolens/pull/234
• https://github.com/geolens-io/geolens/pull/235
• https://github.com/geolens-io/geolens/pull/236
• https://github.com/geolens-io/geolens/pull/237
• https://github.com/geolens-io/geolens/pull/238
• https://github.com/geolens-io/geolens

No related operational record is retained in the current change model.