Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalation

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-92716 · Microsoft / collected KEV context

cve-program · CVE-2026-92716

• https://github.com/geo-chen/oss/blob/main/shuffle.md
• https://github.com/Shuffle/Shuffle
• https://github.com/Shuffle/shuffle-shared/blob/v1.2.50/shared.go#L9888-L9912
• https://github.com/Shuffle/shuffle-shared/commit/c1b582e91b429bc7d5ad02e6c22f98234ec67615
• https://www.vulncheck.com/advisories/shuffle-through-2.2.1-api-key-reset-cross-tenant-privilege-escalation

No related operational record is retained in the current change model.