A vulnerability was found in roadiz core-bundle-dev-app up to 2.3.41/2.5.43/2.6.27/2.7.8 and classified as critical. The affected element is an unknown function of the component Environment Variable Handler. The manipulation results in server-side request forgery.
This vulnerability is known as CVE-2026-33486. It is possible to launch the attack remotely. No exploit is available.
It is suggested to upgrade the affected component.
