Authorization Bypass Vulnerability in SendPortal Sendportal-Core by Mettle

CVE-2026-111358

What is CVE-2026-111358?

The SendPortal sendportal-core, up to version 4.0.1, is susceptible to an authorization bypass vulnerability. This flaw enables authenticated users within a workspace to manipulate subscriber tags across different workspaces. By exploiting unvalidated tag IDs, an attacker can attach subscribers to tags that belong to other workspaces. This not only allows the attacker to access unauthorized campaign content but also to distort reporting metrics. The vulnerability can be triggered through the web subscriber form or a CSV file import, making it critical for workspace administrators to ensure proper validation of tag IDs.

References