THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-8xjq-pr36-ccgf (medium) — Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets

[GHSA] GHSA-8xjq-pr36-ccgf (medium) — Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets

highgithub_advisoriesPublished 2026-08-28

GHSA-8xjq-pr36-ccgf Severity: medium CVE: CVE-2026-55548

Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets

## Summary The `PacketsApi.exportPackets` endpoint in Yamcs fails to properly enforce object-level privileges (`ReadPacket`) when an API request omits specific packet names. As a result, an attacker with a low-privileged acc

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

309218c651680f79df11a8d0f8628f7033f98a83sha1
CVE-2026-55548cve

Original source: https://github.com/advisories/GHSA-8xjq-pr36-ccgf