CVE-2026-77169
A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-…
Published: 2026-09-18 · CVSS: 6.5 · CVSS 3.0
A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-level authorization controls. The workspace app enables organizations to delegate limited administrative privileges for team folder management via API/REST only, restricting access to folders for which the admin has advanced permissions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7