← CVE Radar
CVE-2026-122317SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query
SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user's email, name, avatar, currency, and bankingId and obapiProviderId open-banking identifiers.
5.3 MEDIUMEPSS 0.23%Not in KEVNVD: Received
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 5.3 | MEDIUM | 4.0VulnCheck (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
| 4.3 | MEDIUM | 3.1VulnCheck (CNA) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Details
- CVE ID
- CVE-2026-122317
- Status
- Received
- Assigner (CNA)
- VulnCheck
- Published
- Nov 5, 2026
- Last modified
- 2026-11-05 16:17 UTC
- Weaknesses
- CWE-639 · Authorization Bypass Through User-Controlled Key
Affected Products
As published by the CNA in the CVE record.
oss-appsSplitPro1 version range
- through 2.1.6
References
- github.com https://github.com/oss-apps/split-pro
- github.com https://github.com/oss-apps/split-pro/blob/v2.1.6/prisma/schema.prisma#L41-L51
- github.com https://github.com/oss-apps/split-pro/blob/v2.1.6/src/server/api/routers/user.ts#L202-L212
- github.com https://github.com/oss-apps/split-pro/issues/786
- hackmd.io https://hackmd.io/@hieund/splitpro-trpc-idor-user-expense-disclosure
- vulncheck.com https://www.vulncheck.com/advisories/splitpro-through-2.1.6-authorization-bypass-via-user-getuserdetails-trpc-query