CVE-2026-65824: CWE-294: Authentication Bypass by Capture-replay in open-reception appointment-booking-software
Description
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.1, an attacker who captures a pending invite token can replay it to obtain a passkey-registration credential and register their own passkey on the invited account, taking control of that account. For a staff or tenant-admin invite this yields access to the tenant context tied to that account. This issue has been patched in version 2.2.1.
CVSS v3.1
Score 7.4high
Affected software
open-reception
appointment-booking-software
Weaknesses
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-07-22T23:16:47.752Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6adbc8a5d73cc49347bc6143
Added to database: 10/23/2026, 20:50:45 UTC
Last updated: 10/23/2026, 20:50:45 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.