CVE-2026-28431

CVE-2026-28431 impacts Misskey, an open-source federated social media platform, specifically versions 8.45.0 through 2026.3.0. This vulnerability arises from insufficient permission checks and input validation, enabling unauthorized access to sensitive data. Rated 7.5 HIGH on the CVSS scale, it is a network-exploitable vulnerability with low attack complexity, posing a significant risk of confidentiality compromise and potential data breaches. Although there is no known active exploitation or public exploit code, the vulnerability has garnered limited community discussion and media coverage, including a mention on seclists-oss-security.