{"id":"CVE-2026-124026","published":"2026-11-06T20:17:20.953","lastModified":"2026-11-10T20:19:04.503","description":"Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy that allows registered users to bypass source cocktail membership checks. Attackers owning a bar can POST to /api/cocktails/{id}/copy with other bars' cocktail ids to copy private recipes and images into their own bar.","cvssScore":4.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://github.com/karlomikus/bar-assistant","tags":[]},{"url":"https://github.com/karlomikus/bar-assistant/blob/v6.10.1/app/Http/Controllers/CocktailController.php#L535","tags":[]},{"url":"https://github.com/karlomikus/bar-assistant/commit/bb246d461faf8b50f7814e34b49eb6c3647d297f","tags":[]},{"url":"https://github.com/karlomikus/bar-assistant/issues/641","tags":[]},{"url":"https://github.com/karlomikus/bar-assistant/releases/tag/v6.11.0","tags":[]},{"url":"https://www.vulncheck.com/advisories/bar-assistant-6.0.0-rc1-before-6.11.0-incorrect-authorization-via-cocktail-copy","tags":[]},{"url":"https://hackmd.io/@hieund/cve-2026-124026-bar-assistant-cocktail-copy-cross-bar-idor","tags":[]}],"exploitRefs":[{"url":"https://github.com/karlomikus/bar-assistant","tags":[]},{"url":"https://github.com/karlomikus/bar-assistant/blob/v6.10.1/app/Http/Controllers/CocktailController.php#L535","tags":[]},{"url":"https://github.com/karlomikus/bar-assistant/commit/bb246d461faf8b50f7814e34b49eb6c3647d297f","tags":[]},{"url":"https://github.com/karlomikus/bar-assistant/issues/641","tags":[]},{"url":"https://github.com/karlomikus/bar-assistant/releases/tag/v6.11.0","tags":[]}],"hasPoc":true,"ai":null}