Authorization Bypass in OpenRemote Gateway Service Affects Multiple Realms
CVE-2026-116184

2.1LOW

Key Information:

Vendor

Openremote

Status
Core
Vendor
CVE Published:
25 October 2026

What is CVE-2026-116184?

OpenRemote prior to version 1.31.0 exhibits a significant authorization bypass vulnerability in its GatewayService. This flaw allows realm administrators to impersonate gateways across different realms. Specifically, the service only validates the gateway ID without considering the realm, enabling attackers with WRITE:ADMIN permissions in one realm to create a service user that replicates another realm's gateway ID. This could potentially lead to the overwriting of critical descendant assets and the establishment of unauthorized SSH tunnels into the affected realm's local network.

Affected Version(s)

core 0 < 1.31.0

core 1.31.0

References

https://github.com/openremote/core/security/advisories/GH...
vendor-advisory
https://www.vulncheck.com/advisories/openremote-before-1....
third-party-advisory

CVSS V4

Score:
2.1
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

richturner
.