Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-106462

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operations with more access than intended. This issue is fixed in 1.54.6 when operators also enable scaffolder.requireScmUserCredentials after upgrading.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 6.2%
CVSS Severity
CVSS v3 Score 6.4
Products affected by CVE-2026-106462


Contact Us

Shodan ® - All rights reserved