Vulnerability · Published Aug 6, 2026 · Assigned by GitLab

CVE-2026-18258Authorization Bypass Through User-Controlled Key in eScriptorium

High 8.8

In plain English

A high-severity authorization bypass via user-controlled key in eScriptorium from Scripta. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.5%top 55.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via primary keys supplied in the request body, which are queried against the global model manager instead of the request-scoped queryset

Affected products (as reported)

Vendor	Product	Versions
Scripta	eScriptorium	0 – through 26.4.1

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://gitlab.com/scripta/escriptorium/-/work_items/1226