{"id":"CVE-2026-109797","published":"2026-11-10T01:17:13.603","lastModified":"2026-11-10T20:17:37.727","description":"In SAP/astonish, an authenticated user could potentially identify and operate on another team�s sandbox containers because of improper tenant isolation in the legacy Incus sandbox-management API handlers. The affected handlers did not use the tenant-aware session lookup path, allowing cross-tenant container operations such as listing, exposing or proxying, and deleting containers.The issue affects only the legacy Incus backend. Kubernetes and OpenShell deployments are not affected because the relevant Incus-specific handlers are unavailable there.","cvssScore":7.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwes":["CWE-1220"],"vendors":[],"products":[],"references":[{"url":"https://github.com/SAP/astonish/security/advisories/GHSA-93c9-96j8-4vg9","tags":[]},{"url":"https://url.sap/sapsecuritypatchday","tags":[]}],"exploitRefs":[{"url":"https://github.com/SAP/astonish/security/advisories/GHSA-93c9-96j8-4vg9","tags":[]}],"hasPoc":true,"ai":null}