{"id":"CVE-2026-76237","aliases":["GHSA-xhv3-q4xx-349r"],"url":"https://o3.security/vulnerability/CVE-2026-76237","summary":"stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine","details":"### Summary\nOn a multi-tenant stigmem node, a tenant administrator could list, read, and **admit or reject** quarantined facts belonging to **other** tenants. The list/count queries and `_get_quarantined_fact` in `routes/quarantine.py` lacked an `f.tenant_id = identity.tenant_id` predicate, and the garden lookup was not tenant-scoped — reached via the `/v1/quarantine` list and admit/reject endpoints.\n\n### Impact\nCross-tenant confidentiality (reading another tenant's quarantined content) and cross-tenant integrity (moderating — admitting or rejecting — another tenant's facts), gated only by a plain tenant `write` capability rather than a node-level admin authority.\n\n### Affected configurations\nThis is a cross-**tenant** break. It is exploitable **only** on deployments running the opt-in `stigmem-plugin-multi-tenant` (multiple tenants on one node). A default single-tenant node has only `tenant=\"default\"` — there is no second tenant to cross — so it is **not exploitable** on default deployments. The rating is HIGH for the multi-tenant deployments the plugin exists to isolate.\n\n### Patches\nFixed in `0.9.0a12` (PR #728): `AND f.tenant_id = identity.tenant_id` was added to the list/count queries and `_get_quarantined_fact`; the garden lookup is now tenant-scoped; and any genuinely cross-tenant moderation is gated behind `can_admin_federation()` (node superadmin), not a tenant `write` capability. A tenant-B admin can no longer list, admit, or reject tenant-A's quarantined facts.\n\n### Workarounds\nNone other than upgrading to `0.9.0a12`. Single-tenant deployments are unaffected.","published":"2026-08-19T14:02:15.899Z","modified":"2026-10-28T02:30:27.464302241Z","cvss":null,"epss":{"score":0.0029,"percentile":0.21463,"asOf":"2026-09-12"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"stigmem-node","fixedVersion":"0.9.0a12"}],"fix":{"url":"https://github.com/eidetic-labs/stigmem/pull/728","label":"eidetic-labs/stigmem#728"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/76xxx/CVE-2026-76237.json"},{"type":"ADVISORY","url":"https://github.com/eidetic-labs/stigmem/security/advisories/GHSA-xhv3-q4xx-349r"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76237"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/stigmem-before-0a12-cross-tenant-bola-via-quarantine"},{"type":"WEB","url":"https://github.com/eidetic-labs/stigmem/pull/728"},{"type":"PACKAGE","url":"https://github.com/eidetic-labs/stigmem"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-28T02:30:27.464302241Z"}}