Permission Handling Flaw in OTRS and STORM Modules

CVE-2026-48191

What is CVE-2026-48191?

An improper handling of permissions in OTRS and STORM modules can lead to unintended exposure of sensitive information, including the number of affected Configuration Items (CIs) and Service Level Agreements (SLAs). This vulnerability enables unauthorized users to gain insights into these elements without having the necessary access privileges, posing a significant risk to the confidentiality of critical service information.

References