CVE-2026-16753
Published Oct 13, 2026
Modified Oct 13, 2026
Description
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.
Is your site exposed to CVE-2026-16753?
Run a free security scan — no signup, results in seconds.
References
Frequently Asked Questions
What is CVE-2026-16753? +
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.
How do I check if I'm vulnerable to CVE-2026-16753? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.