Log in Start free

Vulnerability · Published Oct 15, 2026 · Assigned by GitHub_M

CVE-2026-54683NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463)

Medium 6.5

In plain English

A medium-severity authorization bypass via user-controlled key in nl-portal-backend-libraries from nl-portal. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 63.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. Prior to 3.0.3, both the getDocumentContent GraphQL query and GET /api/documentapi/{documentapi}/document/{documentId}/content REST route allow any authenticated portal user to retrieve a document without checking ownership of or another authorized relationship to it. A user with a valid login and another person's document identifier can read that document's contents, which may include sensitive personal information. Document identifiers are random and difficult to guess, but they can leak through other channels. This issue is fixed in version 3.0.3.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Mavennl.nl-portal:documenten-api3.0.3GHSA-jr45-52cw-69h5

Affected products (as reported)

VendorProductVersions
nl-portal nl-portal-backend-libraries < 3.0.3

Weakness: CWE-285, CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References