A vulnerability described as critical has been identified in OpenChoreo up to 1.1.x . Affected by this issue is some unknown functionality of the file internal/openchoreo-api/api/handlers/exec.go of the component API Handlers . The manipulation of the argument project results in improper authorization. This vulnerability is known as CVE-2026-73841 . It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.