CVE-2026-27595

EPSS 0.45%
Veröffentlicht 25.02.2026 03:16:04
Zuletzt bearbeitet 26.06.2026 17:00:06
Erkennungen
Login

Parse Dashboard has incomplete authentication on AI Agent endpoint

Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (POST `/apps/:appId/agent`) has multiple security vulnerabilities that, when chained, allow unauthenticated remote attackers to perform arbitrary read and write operations against any connected Parse Server database using the master key. The agent feature is opt-in; dashboards without an agent config are not affected. The fix in version 9.0.0-alpha.8 adds authentication, CSRF validation, and per-app authorization middleware to the agent endpoint. Read-only users are restricted to the `readOnlyMasterKey` with write permissions stripped server-side. A cache key collision between master key and read-only master key was also corrected. As a workaround, remove or comment out the agent configuration block from your Parse Dashboard configuration.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 135 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Parseplatform ≫ Parse Dashboard Version 7.3.0 Update alpha42 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.3.0 Update alpha43 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.3.0 Update alpha44 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.3.0 Update alpha5 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.3.0 Update alpha6 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.3.0 Update alpha7 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.3.0 Update alpha8 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.3.0 Update alpha9 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.4.0 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.4.0 Update alpha2 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.4.0 Update alpha3 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.4.0 Update alpha4 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.4.0 Update alpha5 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.5.0 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.5.0 Update alpha2 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha10 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha11 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha12 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha13 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha2 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha3 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha4 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha5 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha6 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha7 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha8 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 7.6.0 Update alpha9 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.0.0 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.0.0 Update alpha2 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.0.0 Update alpha3 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.0.0 Update alpha4 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.0.0 Update alpha5 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.0.0 Update alpha6 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha10 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha11 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha12 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha13 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha2 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha3 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha4 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha5 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha6 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha7 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha8 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.0 Update alpha9 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.1.1 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha10 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha11 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha12 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha13 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha14 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha15 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha16 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha17 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha18 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha19 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha2 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha20 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha21 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha22 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha23 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha24 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha25 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha26 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha27 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha3 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha4 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha5 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha6 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha7 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha8 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.2.0 Update alpha9 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha10 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha11 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha12 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha13 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha14 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha15 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha16 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha17 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha18 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha19 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha2 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha20 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha21 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha22 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha23 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha24 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha25 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha26 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha27 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha28 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha29 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha3 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha30 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha31 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha32 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha33 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha34 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha35 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha36 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha37 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha38 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha39 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha4 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha40 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha41 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha42 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha43 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha5 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha6 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha7 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha8 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.3.0 Update alpha9 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.4.0 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.4.1 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.4.1 Update alpha2 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.5.0 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.5.0 Update alpha2 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.5.0 Update alpha3 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.5.0 Update alpha4 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.5.0 Update alpha5 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.5.0 Update alpha6 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 8.5.0 Update alpha7 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 9.0.0 Update alpha1 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 9.0.0 Update alpha2 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 9.0.0 Update alpha3 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 9.0.0 Update alpha4 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 9.0.0 Update alpha5 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 9.0.0 Update alpha6 SwPlatform node.js

Parseplatform ≫ Parse Dashboard Version 9.0.0 Update alpha7 SwPlatform node.js

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.45%	0.356

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
security-advisories@github.com	9.9	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://github.com/parse-community/parse-dashboard/releases/tag/9.0.0-alpha.8

Release Notes

https://github.com/parse-community/parse-dashboard/security/advisories/GHSA-qwc3-h9mg-4582

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-27595

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-27595

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-27595

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-27595