Vulnerability · Published Oct 9, 2026 · Assigned by GitHub_M
CVE-2026-107841pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents
Medium 5.7
In plain English
A medium-severity incorrect authorization in pacioli from john-broadway. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether the marker authorizes cancellation. A credential with API Key Scope.require_consent can submit a caller-controlled Sales Invoice or other supported document under a valid human-minted submit marker and reach Document.cancel() for a different pre-existing submitted document, bypassing the marker's document and act binding, single-use spend, and denial audit. The unauthorized cancellation can reverse the target document's ledger effect; principals without a consent-gated grant are not affected. This issue is fixed in version 0.10.0.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | pacioli-guard | 0.10.0 | GHSA-3hj7-6vmj-h8v4 |
| PyPI | pacioli-guard | 0.10.0 | PYSEC-2026-4246 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| john-broadway | pacioli | >= 0.9.6, < 0.10.0 |
Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N