A vulnerability classified as critical has been found in oneuptime up to 10.0.18. This affects an unknown function of the component GitHub Endpoint. Performing a manipulation of the argument installation_id results in insufficient verification of data authenticity.

This vulnerability is cataloged as CVE-2026-30920. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.