Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-63085— Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence

CVSS 8.8 · High EPSS 0.37% · P30

Affected Version Matrix 1

VendorProductVersion RangeStatus
axeloraxelor-open-platform8.0.0< 8.2.2affected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-63085

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence
Source: CVE Program / CVE List V5
Vulnerability Description
Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can modify sensitive User record fields such as roles and group by submitting changes through a related entity's save path, bypassing the USER_RESTRICTED_FIELDS control and causing the JPA persistence layer to flush attacker-supplied admin role and group assignments on commit.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Axelor Open Platform 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Axelor Axelor Open Platform是法国Axelor公司的一款业务应用开发平台。 Axelor Open Platform 8.2.2之前版本存在授权问题漏洞，该漏洞源于绕过授权限制，通过在嵌套关系保存操作中利用未强制执行的字段限制，允许经过身份验证的非管理员用户提升权限。攻击者可以通过相关实体的保存路径修改敏感的用户记录字段，如角色和组，从而绕过USER_RESTRICTED_FIELDS控制，导致JPA持久层在提交时刷新攻击者提供的管理员角色和组分配。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
axeloraxelor-open-platform 8.0.0 ~ 8.2.2 -

II. Public POCs for CVE-2026-63085

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium
Qwen3.6-35B-A3B · 10212 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-63085

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-63085 (1)

Vendor Pages for CVE-2026-63085 (1)

Other References for CVE-2026-63085 (1)

IV. Related Vulnerabilities

Same weakness: CWE-863

V. Comments for CVE-2026-63085

No comments yet

Leave a comment