← Back

CVE-2026-72564

nvd nist
Published: Aug 10, 2026Modified: Aug 28, 2026Deferred

JSON object

Loading...
9.6
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Exploitability: 3.1 / Impact: 5.8
Source: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c (Secondary)

Description

An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an access token issued for a different resource.

Related CWEs

CWE-639
Authorization Bypass Through User-Controlled Key
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (2)

Source: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
Source: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c

Timeline

No history available yet.