Vulnerability · Published Sep 30, 2026 · Assigned by VulnCheck

CVE-2026-103054AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP

High 7.1

In plain English

A high-severity authorization bypass via user-controlled key in AiSOC from beenuar. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 3.1)7.1High

Exploit odds (30 days)0.3%top 79.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the add_tenants_to_portfolio endpoint to claim unclaimed tenants and read their security alerts, incidents, and posture metrics without consent.

Affected products (as reported)

Vendor	Product	Versions
beenuar	AiSOC	10.0.0 – before 12.0.0

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

References

GitHub Security Advisory (GHSA-mcg9-8pxf-j98v) vendor-advisory
https://github.com/beenuar/AiSOC/commit/151264a8b846db55099e5e0f4d76c388e8df4a92 patch
AiSOC v12.0.0 Release Notes release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/services/api/app/api/v1/endpoints/mssp.py#L1073-L1110 technical-description
VulnCheck Advisory: AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP third-party-advisory