CERT24BIT-parse-2026-112769 — Parse Server before 8.6.98 and 9.x before 9.10.3 Session Class-Level Permission BypassLoading data…
CERT24Threat Observatory
Period

BIT-parse-2026-112769 — Parse Server before 8.6.98 and 9.x before 9.10.3 Session Class-Level Permission Bypass

Parse Server versions before 8.6.98 and 9.x versions before 9.10.3 do not enforce the _Session class-level permissions for creating sessions and adding fields when sessions are created.

← Back to intelligence

BIT-parse-2026-112769 — Parse Server before 8.6.98 and 9.x before 9.10.3 Session Class-Level Permission Bypass

Parse Server versions before 8.6.98 and 9.x versions before 9.10.3 do not enforce the _Session class-level permissions for creating sessions and adding fields when sessions are created.