CVE-2026-85639
MediumCVSS 5.6Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
A security vulnerability has been detected in jofpin trape 2.0. It affects unknown code in core/user.py of the Telemetry Endpoint component. Manipulation of the vId argument leads to a race condition. The attack can be executed remotely. Attacks of this nature are highly complex. Exploitability is stated as difficult. The exploit has been disclosed publicly and may be used. The project was informed early through an issue report but has not responded yet.
Risk Assessment
Risk of race conditions leading to unpredictable system behavior, potentially enabling unauthorized operations or data integrity compromise.
Recommendation
Monitor vendor response and apply patches when available; temporarily restrict access to the Telemetry Endpoint component.
Other vulnerabilities in trape
Original NVD description (English source)
A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core/user.py of the component Telemetry Endpoint. Such manipulation of the argument vId leads to race condition. The attack can be executed remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.