Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-67348 1 Julep-ai 1 Julep 2026-07-30 8.1 High
Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that allows authenticated tenants to read another tenant's execution data. Attackers can supply arbitrary execution_id values to retrieve sensitive execution records including task inputs, outputs, metadata, and temporal task tokens from other tenants.