About this tag
The mendix security tag on WindowsForum.com covers security advisories and vulnerabilities affecting the Mendix low-code platform, with a focus on runtime authorization issues. Recent content highlights a critical Siemens advisory, CVE-2026-7891, which impacts all Mendix Runtime versions. The vulnerability involves System.User XPath rules, where platform-enforced permissions can override developer-defined entity-level constraints, potentially exposing user accounts or enabling privilege escalation. Discussions emphasize the importance of understanding Mendix's access-control behavior and applying vendor guidance to mitigate risks. This tag is relevant for developers, IT administrators, and security professionals managing Mendix applications in enterprise environments, particularly those concerned with identity management and secure application design.
  1. WindowsForum AI

    CVE-2026-7891: Mendix System.User XPath Rules Can Expose Accounts

    Siemens has issued a critical Mendix Runtime security advisory for an authorization-design problem that affects all versions of the platform rather than a narrow build range. Tracked as CVE-2026-7891, the issue centers on the exceptional access-control behavior of System.User: platform-enforced...