Vulnerability · Published Sep 21, 2026 · Assigned by VulnCheck

CVE-2026-94536lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource

Medium 4.3

In plain English

A medium-severity authorization bypass via user-controlled key in lamp-cloud from dromara. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.3%top 72.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint, allowing authenticated users to read any employee's roles and permissions. Attackers can supply arbitrary employeeId values to enumerate other employees' role codes, permission codes, and complete front-end router trees without authorization checks.

Affected products (as reported)

Vendor	Product	Versions
dromara	lamp-cloud	0 – through 5.10.0

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

Proof of concept exploit
Vulnerable code technical-description
https://github.com/dromara/lamp-cloud product
VulnCheck Advisory: lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource third-party-advisory