Description
WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" (a). This bypasses the admin-controlled moderation and draft workflows. The setStatus() method validates the status code against a list of known values but does not verify that the caller has permission to set that particular status. As a result, any user with upload permissions can publish videos directly, circumventing content review processes. At time of publication, there are no publicly available patches.
INFO
Published Date :
2026-03-31T20:55:09.083Z
Last Modified :
2026-04-01T15:53:23.775Z
Source :
GitHub_M
AFFECTED PRODUCTS
The following products are affected by CVE-2026-34738 vulnerability.
| Vendors | Products |
|---|---|
| Wwbn |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-34738.
