CVE-2025-56333

Critical

Published: 29/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component.

An attacker may bypass two-factor authentication and gain elevated privileges, potentially leading to unauthorized system access.

Update pangolin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component