THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-4h97-p9wq-chqj (medium) — Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False

[GHSA] GHSA-4h97-p9wq-chqj (medium) — Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False

highgithub_advisoriesPublished 2026-08-18

GHSA-4h97-p9wq-chqj Severity: medium CVE: CVE-2026-71322

Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False

## Summary

The `CertificateExport` handler in `lemur/certificates/views.py` nests its entire ownership / `CertificatePermission` check inside an `if plugin.requires_key:` branch. When the selected export plugin advertises `requires_

MITRE ATT&CK techniques

Private KeysT1552.004

Indicators of compromise

CVE-2026-71322cve
https://lemur.local/api/1/certificates/url

Original source: https://github.com/advisories/GHSA-4h97-p9wq-chqj