A vulnerability labeled as critical has been found in InvenTree up to 1.2.6. This issue affects some unknown processing. Such manipulation leads to improper authorization.
This vulnerability is uniquely identified as CVE-2026-35479. The attack can be launched remotely. No exploit exists.
The affected component should be upgraded.
