CVE Catalog

CVE-2025-56332

Critical
Published: Translated: NVD NIST

Summary

Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration

Risk Assessment

The risk for the organization is the possibility of unauthorized access to resources protected by Pangolin, potentially leading to data confidentiality and integrity breaches.

Recommendation

It is recommended to immediately update Pangolin to the latest version and review and secure the default configuration.

Original NVD description (English source)

Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration

Vulnerability data from NVD (NIST) · CISA KEV · EPSS