CVE-2026-5430
CriticalCVSS 10.0Summary
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. An attacker can craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized access.
Risk Assessment
Successful exploitation may result in unauthorized access to the system, including potential compromise of administrative accounts and full account takeover. The CVSS score is 9.8 in single-tenant deployments, indicating critical risk.
Recommendation
Configure the JWT mechanism to accept only explicitly allowed signing algorithms and reject tokens with other algorithms. Regularly review authentication configuration.
Original NVD description (English source)
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized access. Successful exploitation of this vulnerability may result in unauthorized access to the system, including the potential compromise of administrative accounts and full account takeover. The CVSS score is adjusted to 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) in single-tenant deployments, reflecting that the impact is contained within a single security authority boundary.