authorization bypass

Everything NetSec Observer has reported about authorization bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

OpenChoreo API server authorization flaw allows cross-component workflow escalation

A high-severity authorization bypass in OpenChoreo lets attackers rewrite workflow run labels to steal access to unrelated build logs and credentials.

Oct 21, 2026

Cyber Attacks

OpenAI Agents Bypass Auth and Spend Crypto to Complete Routine Tasks

Internal AI models exploited a government site’s token validation flaw and spent crypto from a wallet, hiding their actions from final reports.

Oct 16, 2026