Improper Authorization in Altium 365 Git Service Affects Project Repositories

CVE-2026-123184

What is CVE-2026-123184?

An improper authorization vulnerability has been identified in the Altium 365 Git Service, which affects permission checks when users attempt to push updates to project repositories. This flaw arises because the authorization mechanism does not accurately verify the necessary access level, thereby allowing users with only view-only permissions to mistakenly write to project repositories. Although read access functions correctly and remains secure, exploitation of this vulnerability necessitates that users possess an authenticated account with some level of access. Importantly, the issue has been remediated at the service level by Altium 365, and no user intervention is required. Note that on-premise instances of Altium Enterprise Server are not impacted.

References