CVE-2026-27595

EPSS 0.45%
Veröffentlicht 25.02.2026 03:16:04
Zuletzt bearbeitet 26.06.2026 17:00:06
CVE-Watchlists
Login
Unerledigt
Login

Parse Dashboard has incomplete authentication on AI Agent endpoint

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (POST `/apps/:appId/agent`) has multiple security vulnerabilities that, when chained, allow unauthenticated remote attackers to perform arbitrary read and write operations against any connected Parse Server database using the master key. The agent feature is opt-in; dashboards without an agent config are not affected. The fix in version 9.0.0-alpha.8 adds authentication, CSRF validation, and per-app authorization middleware to the agent endpoint. Read-only users are restricted to the `readOnlyMasterKey` with write permissions stripped server-side. A cache key collision between master key and read-only master key was also corrected. As a workaround, remove or comment out the agent configuration block from your Parse Dashboard configuration.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 135 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Parseplatform ≫ Parse Dashboard Version7.3.0 Updatealpha42 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.3.0 Updatealpha43 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.3.0 Updatealpha44 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.3.0 Updatealpha5 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.3.0 Updatealpha6 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.3.0 Updatealpha7 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.3.0 Updatealpha8 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.3.0 Updatealpha9 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.4.0 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.4.0 Updatealpha2 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.4.0 Updatealpha3 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.4.0 Updatealpha4 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.4.0 Updatealpha5 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.5.0 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.5.0 Updatealpha2 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha10 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha11 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha12 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha13 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha2 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha3 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha4 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha5 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha6 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha7 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha8 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version7.6.0 Updatealpha9 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.0.0 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.0.0 Updatealpha2 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.0.0 Updatealpha3 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.0.0 Updatealpha4 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.0.0 Updatealpha5 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.0.0 Updatealpha6 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha10 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha11 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha12 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha13 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha2 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha3 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha4 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha5 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha6 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha7 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha8 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.0 Updatealpha9 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.1.1 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha10 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha11 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha12 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha13 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha14 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha15 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha16 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha17 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha18 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha19 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha2 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha20 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha21 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha22 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha23 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha24 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha25 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha26 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha27 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha3 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha4 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha5 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha6 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha7 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha8 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.2.0 Updatealpha9 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha10 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha11 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha12 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha13 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha14 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha15 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha16 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha17 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha18 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha19 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha2 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha20 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha21 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha22 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha23 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha24 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha25 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha26 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha27 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha28 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha29 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha3 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha30 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha31 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha32 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha33 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha34 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha35 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha36 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha37 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha38 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha39 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha4 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha40 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha41 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha42 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha43 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha5 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha6 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha7 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha8 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.3.0 Updatealpha9 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.4.0 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.4.1 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.4.1 Updatealpha2 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.5.0 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.5.0 Updatealpha2 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.5.0 Updatealpha3 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.5.0 Updatealpha4 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.5.0 Updatealpha5 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.5.0 Updatealpha6 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version8.5.0 Updatealpha7 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version9.0.0 Updatealpha1 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version9.0.0 Updatealpha2 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version9.0.0 Updatealpha3 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version9.0.0 Updatealpha4 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version9.0.0 Updatealpha5 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version9.0.0 Updatealpha6 SwPlatformnode.js

Parseplatform ≫ Parse Dashboard Version9.0.0 Updatealpha7 SwPlatformnode.js

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.45%	0.356

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
security-advisories@github.com	9.9	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://github.com/parse-community/parse-dashboard/releases/tag/9.0.0-alpha.8

Release Notes

https://github.com/parse-community/parse-dashboard/security/advisories/GHSA-qwc3-h9mg-4582

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-27595

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-27595

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-27595

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-27595