---
id: CVE-2026-111351
title: metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API
summary: >-
  metasfresh through 5.175 contains a missing record-level authorization
  vulnerability in BoardRestController that allows authenticated low-privilege
  users to bypass role and organization access checks. Attackers can call the
  getBoard, get…
severity: medium
cvss: 4.2
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-639
vendor: metasfresh
product: metasfresh
affected:
  - metasfresh <= 5.175
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T21:43:41.617Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-111351'
references:
  - url: >-
      https://hackmd.io/@hieuPenguinnn/metasfresh-board-rest-missing-record-authz
  - url: >-
      https://github.com/metasfresh/metasfresh/blob/5.175/backend/de.metas.ui.web.base/src/main/java/de/metas/ui/web/board/BoardRestController.java#L137-L220
  - url: >-
      https://github.com/metasfresh/metasfresh/blob/56dd881b972af4edb071e4f1261a55a8b1a9c4d7/backend/de.metas.ui.web.base/src/main/java/de/metas/ui/web/board/BoardDescriptorRepository.java#L473-L511
  - url: 'https://github.com/metasfresh/metasfresh'
  - url: >-
      https://www.vulncheck.com/advisories/metasfresh-through-5.175-authorization-bypass-via-rest-api-board-rest-api
    label: >-
      VulnCheck Advisory: metasfresh through 5.175 Authorization Bypass via
      /rest/api/board REST API
tags:
  - cve.org
ingestedAt: '2026-10-15T22:48:25.456Z'
---

## Overview

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read records outside their scope and modify board card assignments.

## Affected

- `metasfresh <= 5.175`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.