REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archiver" service this can be leveraged to create an archive (zip or tar-file) containing all resources that this creator of the public link has access to. This vulnerability is fixed in 2.42.3 and 2.40.3.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00039.

Exploitation none

Automatable yes

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
opencloud-eu reva affected
Version Status Constraints
< 2.40.3 affected —
>= 2.41.0, < 2.42.3 affected —

Configuration 1 [-]

OR cpe:2.3:a:heinlein:opencloud_reva:*:*:*:*:*:*:*:*
cpe:2.3:a:heinlein:opencloud_reva:*:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Opencloud-eu Subscribe
Reva Subscribe

Project Subscriptions

Vendors Products
Heinlein Subscribe
Opencloud Reva Subscribe
Opencloud-eu Subscribe
Reva Subscribe
Advisories
Source ID Title
Github GHSA Github GHSA GHSA-9j2f-3rj3-wgpg OpenCloud Reva has a Public Link Exploit
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://github.com/opencloud-eu/reva/commit/95aa2bc5d980eaf6cc134d75782b4f5ac7b36ae1 cve-icon cve-icon
https://github.com/opencloud-eu/reva/security/advisories/GHSA-9j2f-3rj3-wgpg cve-icon cve-icon
History

Tue, 24 Feb 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Heinlein
Heinlein opencloud Reva
CPEs cpe:2.3:a:heinlein:opencloud_reva:*:*:*:*:*:*:*:*
Vendors & Products Heinlein
Heinlein opencloud Reva

Mon, 09 Feb 2026 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Opencloud-eu
Opencloud-eu reva
Vendors & Products Opencloud-eu
Opencloud-eu reva

Fri, 06 Feb 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 06 Feb 2026 19:00:00 +0000

Type Values Removed Values Added
Description REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archiver" service this can be leveraged to create an archive (zip or tar-file) containing all resources that this creator of the public link has access to. This vulnerability is fixed in 2.42.3 and 2.40.3.
Title REVA Public Link Exploit
Weaknesses CWE-863
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-02-06T18:52:19.409Z

Reserved: 2026-01-19T18:49:20.657Z

Link: CVE-2026-23989

cve-icon Vulnrichment

Updated: 2026-02-06T18:52:10.574Z

cve-icon NVD

Status : Analyzed

Published: 2026-02-06T19:16:08.470

Modified: 2026-02-24T20:57:55.337

Link: CVE-2026-23989

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-02-09T10:49:55Z

Weaknesses