Skip to content
Threat Feed
Subscribe

Vendor

DeepstreamIO

1 brief RSS
critical advisory

Deepstream Server Prototype Pollution (CVE-2026-49252) Allows Privilege Escalation

Deepstream server versions up to and including 10.0.4 are vulnerable to prototype pollution (CVE-2026-49252), a critical flaw allowing any authenticated user with write permissions to any record to potentially escalate their privileges; the vulnerability is patched in version 10.0.5.

deepstream server +1 prototype-pollution vulnerability privilege-escalation deepstream npm
1r 1t 1c