NVD security advisoryHigh
High advisory for In Secret Server versions earlier than 1
CVE-2026-115830 · Reported 30 Oct 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
In Secret Server versions earlier than 1Affected product
Advisory overview
In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive cloudadmin permissions in response.
