CVE-2026-27812: Sub2API Vulnerable to Password Reset Poisoning via Host Header Trust Issue, Leading to Account Takeover
Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. A vulnerability in versions prior to 0.1.85 is a Password Reset Poisoning (Host Header / Forwarded Header trust issue), which allows attackers to manipulate the password reset link. Attackers can exploit this flaw to inject their own domain into the password reset link, leading to the potential for account takeover. The vulnerability has been fixed in version v0.1.85. If upgrading is not immediately possible, users can mitigate the vulnerability by disabling the "forgot password" feature until an upgrade to a patched version can be performed. This will prevent attackers from exploiting the vulnerability via the affected endpoint.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27812?
The severity of CVE-2026-27812 is classified as high due to its potential to allow account takeover.
How do I fix CVE-2026-27812?
To fix CVE-2026-27812, upgrade your Sub2API to version 0.1.85 or later.
What is the impact of CVE-2026-27812?
The impact of CVE-2026-27812 is that an attacker can exploit the vulnerability to change password reset processes, leading to unauthorized access.
Which versions of Sub2API are affected by CVE-2026-27812?
Versions of Sub2API prior to 0.1.85 are affected by CVE-2026-27812.
What type of vulnerability is CVE-2026-27812?
CVE-2026-27812 is a Password Reset Poisoning vulnerability caused by a Host Header Trust Issue.