Medium, CVSS 5.7PyPIAmendedPublished
pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents
CVE-2026-107841 · GHSA-3hj7-6vmj-h8v4
- Affected
- PyPI pacioli-guard >= 0.9.6, < 0.10.0
- Fixed in
- 0.10.0· Vendor fix available
- Issue
- Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed act, nested acts are allowed to "ride" the consent established by the enclosing act instead of needing a marker of their own. The ride predicate returned true for every cancel, regardless of which act the enclosing marker authorised. Riding never reaches consentverdict, which is where the marker-to-act binding is enforced. The result: any Document.cancel() performed inside an act that had established consent reached docstatus = 2 with no marker, no act-binding check, no single-use spend, and no denial audit row. This is reachable with the exact grant an operator is documented to give the broker, and the cancelled document's identity is caller-controlled: - Sales Invoice.onsubmit…
Recommended action: Upgrade to 0.10.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.