CVE-2024-29316: Nodebb

Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days.

NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-privileged attacker can access the restricted tabs for the Admin group via "isadmin":true.

Affected products

• Nodebb Nodebb: version 3.6.7 only

Published 2024-03-28. Last modified 2026-06-17.