CVE-2026-2742 | Vaadin Flow up to 14.14.0/23.6.6/24.9.7/25.0.1 Endpoint /vaadin access control

A vulnerability labeled as critical has been found in Vaadin Flow up to 14.14.0/23.6.6/24.9.7/25.0.1. Affected by this vulnerability is an unknown functionality of the file /vaadin of the component Endpoint. Executing a manipulation can lead to improper access controls.

The identification of this vulnerability is CVE-2026-2742. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.