AIKIDO-2026-10795
@univerjs/sheets-ui is vulnerable to Incorrect Authorization
54
Medium Risk
This Affects:
@univerjs/sheets-uiTL;DR
Applications that bundle @univerjs/sheets-ui send inline editing, IME input, paste shortcuts, and related UI-driven commands through SheetPermissionCheckUIController, which delegates to permission helpers from @univerjs/sheets. Some command ingress paths did not line up with the correct evaluation before the fix, so edits that permission rules should reject could still run when triggered from those UI flows. The update routes each handled command through the intended workbook, worksheet, and range permission checks. Integrations that never load @univerjs/sheets-ui do not execute this controller.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
@univerjs/sheets-ui is vulnerable to Incorrect Authorization in versions 0.5.4 - 0.20.1.
How to fix this
Upgrade the @univerjs/sheets-ui library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant