CVE-2026-65824

Published: Oct 23, 2026Modified: Oct 23, 2026

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: security-advisories@github.com (Secondary)

Description

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.1, an attacker who captures a pending invite token can replay it to obtain a passkey-registration credential and register their own passkey on the invited account, taking control of that account. For a staff or tenant-admin invite this yields access to the tenant context tied to that account. This issue has been patched in version 2.2.1.

Related CWEs

CWE-294

Authentication Bypass by Capture-replay

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

References (3)

https://github.com/open-reception/appointment-booking-software/commit/da921eb9d36953276577c0a6deb9267bfec03622

Source: security-advisories@github.com

https://github.com/open-reception/appointment-booking-software/releases/tag/v2.2.1

Source: security-advisories@github.com

https://github.com/open-reception/appointment-booking-software/security/advisories/GHSA-hvcx-8476-rwv6

Source: security-advisories@github.com

Timeline

No history available yet.