A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 3, 2026 · NIST NVD

   Detected

   A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.

2. Jul 24, 2026 · NIST NVD

   Updated

   A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.

Affected

• cpe mygardyn/cloud apiversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-25197

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-25197

  A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.

  nvd.nist.gov

References

• Third Party Advisory · github.com
• Vendor Advisory · mygardyn.com
• Third Party Advisory · cisa.gov