Authorization Bypass Vulnerability in DeepTutor by HKUDS
CVE-2026-51876
Currently unrated
What is CVE-2026-51876?
DeepTutor version 1.4.0 is impacted by an authorization bypass vulnerability that occurs during the book confirmation process. An unauthorized user can exploit this flaw by reusing a publicly exposed book ID to send a confirm-proposal request for an existing book. This action can lead to unauthorized modifications of critical metadata and spine content, posing significant risks to data integrity and confidentiality.