Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automatically deployed to all Apollo-managed Gotham Instances
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
"It centralizes every scrap of institutional data into a single "operating system" to protect it, but in doing so, creates the ultimate honeypot. Even with "indelible" audit logs, we're seeing critical auth bypasses (like CVE-2024-49587)" (cont.)
Post summary
The post mentions CVE‑2024‑49587 as a critical auth bypass but provides no further details, links, or evidence of exploitation.