CVE-2026-111636

LOWCVSS 9.2 · CRITICAL

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default app_secret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenant_demo' to gain full tenant administration, including stored model and channel credentials.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-321

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

DFIR Lab@DFIR_Lab1d
🚨 HIGH: CVE-2026-111636 (CVSS 8.1) OpenBMB StaffDeck ≤0.5.6 auth bypass via hard-coded app_secret. Unauthenticated attackers can forge admin tokens, gain full tenant access. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/Rz1ltIzuKC
0000026
153 followersView on X

Explore more

Back to dashboard