A vulnerability was found in devtron-labs devtron up to 2.0.0. It has been declared as critical. The impacted element is an unknown function of the component Attributes API Interface. The manipulation results in missing authorization.

This vulnerability is identified as CVE-2026-25538. The attack can be executed remotely. There is not any exploit available.

It is best practice to apply a patch to resolve this issue.