CRITICALCVSS v3.1 9.8Vulnerability
CVE-2026-125370
Kubero 3.0.0 through 3.1.1 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge administrative JWTs by using a hardcoded fallback signing secret when JWT_SECRET is unset. Attackers can sign tokens with arbitrary role, userGroups and permissions claims, which JwtStrategy.validate() trusts without a database lookup, to take control of pipelines, applications, users and API tokens.
Properties
- Severity
- CRITICAL
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Epss score
- 0.00683
- Cvss score
- 9.8
- Cvss severity
- CRITICAL
- Retrieved at
- 2026-11-10T23:35:17+00:00
- Score
- 9.8
- Last source
- FIRST EPSS
- Cvss version
- 3.1
- Cve id
- CVE-2026-125370
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-11-10T03:20:43+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Published at
- 2026-11-10T00:17:09.237
- Last modified
- 2026-11-10T00:17:09.370
- Epss percentile
- 0.52832
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph