Stored Cross-Site Scripting Vulnerability in Altium Workflow Engine

CVE-2026-1010

What is CVE-2026-1010?

A stored cross-site scripting (XSS) vulnerability in the Altium Workflow Engine arises from inadequate server-side input sanitization within workflow form submission APIs. This flaw allows an authenticated user to inject arbitrary JavaScript into the workflow data. When an administrator interacts with the affected workflow, the embedded script executes within the administrator's browser environment. This could facilitate significant security risks such as privilege escalation, unauthorized creation of new administrator accounts, theft of session tokens, and execution of unauthorized administrative actions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References