CVE-2026-111684 Details

A vulnerability in the Magistrala IoT platform's certs service, present in versions through 1.0.0, allows authenticated workspace members to bypass authorization and manipulate device certificates belonging to other tenants. This is achieved by exploiting the absence of workspace-specific checks in the certs service's authorization middleware. As a result, attackers can view, issue, and revoke certificates by simply providing foreign serial numbers or entity IDs, all under their own workspace path. The vulnerability disrupts the connectivity of devices belonging to the targeted tenant and can be exploited to issue certificates that are trusted by the platform for cross-tenant device management.

The vulnerability can be addressed by implementing proper workspace scope checks in the certs service. This includes adding a workspace column to the certificate mapping database, ensuring that all certificate operations are validated against the correct workspace ownership before being processed.