CVE-2026-49081

HighCVSS 8.2

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Summary

Versions of Stripe up to 1.3.12 have a vulnerability in unauthenticated access that allows unauthorized access to user registration functions.

Organizations may be exposed to unauthorized user registrations, which can lead to abuse and data loss.

It is recommended to upgrade to the latest version of Stripe to mitigate this security vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions.