A vulnerability marked as critical has been reported in the-hideout tarkov-data-manager up to 2.0.0. The affected element is an unknown function of the component API Endpoint Handler. The manipulation leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-21856. The attack is possible to be carried out remotely. No exploit exists.

Applying a patch is the recommended action to fix this issue.