---
title: "Retrieves a review object by its UUID (accessible to Secretariat or same-organization Admin)"
method: GET
path: "/review/byUUID/{uuid}"
tags: ["Review Object"]
---

# Retrieves a review object by its UUID (accessible to Secretariat or same-organization Admin)

`GET /review/byUUID/{uuid}`

<h2>Access Control</h2>  <p>User must belong to an organization with the <b>Secretariat</b> role or have the <b>Admin</b> role for the review object's target organization</p>

## Path parameters

- `uuid` string, required

## Headers

- `CVE-API-ORG` string, required
- `CVE-API-USER` string, required
- `CVE-API-KEY` string, required

## Response `200`

Returns the review object

- ReviewJson — unresolved $ref

## Other responses

- `400` — Bad Request
- `401` — Not Authenticated
- `403` — Forbidden
- `404` — Not Found
- `500` — Internal Server Error

## Changes

- **2026-02-13** `e06c9c895446` — 1 info
  - endpoint added
- **2025-09-19** `efebaec5edf0` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/cveproject/apis/cve-services-api/changes/review/byUUID/:uuid/get.md)

---

[API](https://skmtc.dev/cveproject/apis/cve-services-api.md) · [All operations](https://skmtc.dev/cveproject/apis/cve-services-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cveproject/cve-services-api/revisions/a0323331d921/schema)