CVE-2026-3053 | DataLinkDC dinky up to 1.2.5 OpenAPI Endpoint AppConfig.java addInterceptors missing authentication

A vulnerability classified as critical was found in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file dinky-admin/src/main/java/org/dinky/configure/AppConfig.java of the component OpenAPI Endpoint. Executing a manipulation can lead to missing authentication.

This vulnerability is registered as CVE-2026-3053. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.