Threats tagged 'ghsa-cwr5-3cmp-8877'

CVE-2026-72564 is a critical authorization bypass vulnerability in fosrl Pangolin up to version 1.20.0. It allows an authenticated remote attacker to reuse an access token issued for one resource to authenticate to any resource in any organization, bypassing proper authorization controls. This vulnerability can lead to complete compromise of confidentiality and integrity of resources without requiring user interaction.