CVE-2026-101287: Authentication bypass in Stela by Diaple Networking
Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier (userId) and the status of the authentication process (validSteps) in this cookie and relies on these values—which can be modified by the client—to complete the login process.
A remote attacker, without valid credentials or interaction from other users, could manipulate the cookie to bypass authentication checks and impersonate any account, including one with SUPERADMIN privileges. This would allow the attacker to obtain a valid JWT token with administrative privileges and compromise the confidentiality and integrity of the application.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Stela by Diaple Networkingto a version that resolves this vulnerability.Fixed in 1.60.1
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker can exploit it without valid credentials and without interaction from other users. An attacker can manipulate the client-side authProcess cookie to impersonate accounts, including a SUPER_ADMIN account.
Which deployments are affected?
Stela versions prior to 1.60.1 are affected. The vulnerable login flow relies on userId and validSteps values in the authProcess cookie without validating the cookie's integrity.
What access could an attacker obtain?
Successful exploitation can result in a valid JWT token with administrative privileges. This can compromise the confidentiality and integrity of the application.