A vulnerability was found in phenixdigital phoenix_storybook up to 1.0.x and classified as critical. Impacted is an unknown function in the library lib/phoenix_storybook/live/story/component_iframe_live.ex of the component Control Message Handler. Such manipulation of the argument Query leads to authorization bypass.
This vulnerability is documented as CVE-2026-47068. The attack can be executed remotely. There is not any exploit available.
It is suggested to upgrade the affected component.