Permission Bypass in Tables App by Vendor A

CVE-2026-82983

What is CVE-2026-82983?

The Tables app contains a vulnerability within its share-listing endpoint that fails to enforce permissions correctly. This allows users with only read-data access to retrieve details about users, groups, and teams who have access to a specific table, along with their permission levels. While sensitive table data remains protected, the exposure of share recipient information poses a security risk, as it can lead to the identification of access levels by unauthorized users.

References