CVE-2026-107841 Details
Description
pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether the marker authorizes cancellation. A credential with API Key Scope.require_consent can submit a caller-controlled Sales Invoice or other supported document under a valid human-minted submit marker and reach Document.cancel() for a different pre-existing submitted document, bypassing the marker's document and act binding, single-use spend, and denial audit. The unauthorized cancellation can reverse the target document's ledger effect; principals without a consent-gated grant are not affected. This issue is fixed in version 0.10.0.
A vulnerability exists in the Pacioli-Guard document-layer consent gate for ERPNext, affecting versions 0.9.6 prior to 0.10.0. The issue allows nested cancellation operations to override consent established by an enclosing governed act without proper authorization. This is achieved by using a credential with the API Key Scope.require_consent to submit a Sales Invoice or other supported document under a valid consent marker, and then canceling a different pre-existing submitted document. The cancellation bypasses the necessary consent verification, leading to unauthorized reversals of the document's ledger effects. This vulnerability is particularly concerning for principals without a consent-gated grant, as they are not affected by the issue.
Users can upgrade to Pacioli-Guard version 0.10.0, which addresses this vulnerability by ensuring that cancellations within an act require their own consent markers. After upgrading, any ERPNext flow that involves a submitted document cascading into a cancellation must have a consent marker for the cancellation as well.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 9, 2026CISA-ADP
Assessed Oct 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/john-broadway/pacioli/commit/f3c7219f5dde6050bd7921e0ac55afd02771250c | [email protected] | Source CodeVendor |
| https://github.com/john-broadway/pacioli/releases/tag/guard-v0.10.0 | [email protected] | Release NotesVendor |
| https://github.com/john-broadway/pacioli/security/advisories/GHSA-3hj7-6vmj-h8v4 | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| pacioli-guard | >= 0.9.6, < 0.10.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 9, 2026 | CVE Modified | CISA-ADP |
| Oct 9, 2026 | New CVE Received | [email protected] |