# CVE-2026-65013: Onlook IDOR in tRPC API procedures

Source: https://junglewise.ai/threats/cve-2026-65013-onlook-idor-in-trpc-api-procedures  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-22. Updated: 2026-07-22  
License: CC BY 4.0 with a link back

CVE-2026-65013 · Severity: high · CVSS 8.8 · Published 2026-07-22

Onlook, a visual development tool, contains a security flaw where logged-in users can access or delete data belonging to other users. By manipulating unique identifiers in web requests, an attacker could read private project data, delete conversation histories, or remove legitimate members from projects they do not own. This could lead to significant data loss and unauthorized exposure of intellectual property.

Technologies: [Onlook](https://junglewise.ai/threats/technologies/onlook). Vendors: [Onlook](https://junglewise.ai/threats/vendors/onlook).

## Quick answers

**Is CVE-2026-65013 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-65013 being exploited in the wild.

**How severe is CVE-2026-65013?** High severity, with a CVSS score of 8.8, published 22 July 2026.

**Which products and versions are affected?** Onlook through 0.2.32.

**Is there a fix for CVE-2026-65013?** A patch was published on 2026-07-21: Fix committed to main branch Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-65013 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-65013?** Check whether you run Onlook at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A Broken Object Level Authorization (BOLA/IDOR) vulnerability exists in multiple tRPC API procedures in Onlook. The root cause is that the Drizzle ORM database client connects using a Postgres superuser role that bypasses Row Level Security (RLS), and the application failed to implement manual authorization checks in several tRPC routers. Authenticated attackers can provide arbitrary UUIDs for parameters such as projectId, conversationId, or branchId to bypass membership requirements. Affected procedures include project.get, member.remove, and chat.conversation.delete. The vulnerability was addressed in commit 423e2e9 by implementing a resolve-then-verify pattern across all project-scoped procedures.

## Affected products

- Onlook Onlook repo through 0.2.32

## Timeline

- 2026-06-01: disclosed: Vulnerability reported to vendor via email
- 2026-07-21: patched: Fix committed to main branch
- 2026-07-22: advisory: CVE published to NVD

## References

- [https://github.com/onlook-dev/onlook/commit/423e2e924366419e418ee049093872d535eea41a](https://github.com/onlook-dev/onlook/commit/423e2e924366419e418ee049093872d535eea41a)
- [https://github.com/onlook-dev/onlook/issues/3122](https://github.com/onlook-dev/onlook/issues/3122)
- [https://github.com/onlook-dev/onlook/pull/3129](https://github.com/onlook-dev/onlook/pull/3129)
- [https://www.vulncheck.com/advisories/onlook-trpc-insecure-direct-object-reference-via-multiple-procedures](https://www.vulncheck.com/advisories/onlook-trpc-insecure-direct-object-reference-via-multiple-procedures)

## Related threats

- [An Open Redirect vulnerability exists in the OAuth callback handler in file…](https://junglewise.ai/threats/cve-2025-63784-an-open-redirect-vulnerability-exists-in-the-oauth-callback)
- [A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update…](https://junglewise.ai/threats/cve-2025-63783-a-broken-object-level-authorization-bola-vulnerability-was)