Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #11

Honcho software vulnerability lets API keys read workspace data

Original: 🚨 EUVD-2026-96985 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: honcho 🏢 Vendor: Plastic Labs 📅 Updated: 2026-10-11 📝 Plastic L

A medium-severity security flaw, tracked as EUVD-2026-96985 with a CVSS score of 5.3, has been disclosed in Plastic Labs' Honcho software through version 3.3.0. The incorrect authorization issue allows holders of peer- or session-scoped API keys to read workspace data they should not be able to access, potentially exposing sensitive information across customer workspaces. Administrators running Honcho are advised to check for a patched release and review key scoping.

Why now: Security teams and developers are being alerted to a newly published vulnerability disclosure affecting the Honcho platform.

Plastic LabsHonchoEUVD-2026-96985

Open on mastodon →

Evidence

• 🚨 EUVD-2026-96985 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: honcho 🏢 Vendor: Plastic Labs 📅 Updated: 2026-10-11 📝 Plastic Labs Honcho through 3.3.0 contains an incorrect authorization vulnerability that allows peer- or session-scoped API key holders to read workspace data because… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1869989