CVE-2024-29866

CRITICAL 9.1CVE-2024-29866 · Published 21/03/2024 · updated 17/06/2026

In short

CVE-2024-29866 is a CRITICAL (CVSS 9.1) vulnerability affecting seq (datalust).
Chance of exploitation in the next 30 days (EPSS): 0.69%, higher than 52.8% of all vulnerabilities.
Fix: update to 2024.1.11146, 2023.4.11151 or later.

Package	Affected versions	Patched versions
seq datalust	`≥ 2024, < 2024.1.11146< 2023.4.11151`	`2024.1.111462023.4.11151`

Description

Datalust Seq before 2023.4.11151 and 2024 before 2024.1.11146 has Incorrect Access Control because a Project Owner or Organization Owner can escalate to System privileges.

References

datalust.co · Product
datalust/seq-tickets · Issue Tracking

More vulnerabilities in seq

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

seq

datalust

≥ 2024, < 2024.1.11146< 2023.4.11151

2024.1.111462023.4.11151

More vulnerabilities in seq

See all →