CVE-2026-33421 | parse-community parse-server up to 8.6.52/9.6.0-alpha.41 LiveQuery WebSocket Interface authorization (GHSA-fph2-r4qg-9576)

A vulnerability was found in parse-community parse-server up to 8.6.52/9.6.0-alpha.41. It has been declared as problematic. Affected by this issue is some unknown functionality of the component LiveQuery WebSocket Interface. The manipulation results in incorrect authorization.

This vulnerability was named CVE-2026-33421. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.