CVE-2026-26004
Sentry allows unauthorized access to event data across organizational boundaries
Summary
Sentry allows unauthorized access to event data across organizational boundaries
Original description
The description as published by the source.
Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory securitylab.github.com
- patch github.com
- patch github.com