CVE-2026-1169

MEDIUM

Birkir Prime < 0.4.0 - Missing Authorization

Title source: rule

Description

A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

References (5)

[Various Sources] https://github.com/birkir/prime/

[Exploit, Issue Tracking, Vendor Advisory] https://github.com/birkir/prime/issues/547

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.341763

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.341763

[Third Party Advisory, VDB Entry] https://vuldb.com/?submit.731287

Scores

CVSS v3 4.3

EPSS 0.0003

EPSS Percentile 9.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Classification

CWE

CWE-862 CWE-352

Status published

Affected Products (1)

birkir/prime < 0.4.0

Timeline

Published Jan 19, 2026

Tracked Since Feb 18, 2026