CVE-2026-44347: Warpgate: SSO CSRF -- State Token Not Validated on Return
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.23.3, the SSO flow does not validate the state parameter, which makes it possible for an attacker to trick a user into logging into the attacker's account, possibly convincing them to perform sensitive actions on the attacker's account (such as writing sensitive data to the attacker's SSH target, or logging into an HTTP target that the attacker set up). This vulnerability is fixed in 0.23.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44347?
CVE-2026-44347 is considered a critical vulnerability due to its potential for unauthorized access through Cross-Site Request Forgery (CSRF).
How do I fix CVE-2026-44347?
To fix CVE-2026-44347, upgrade Warpgate to version 0.23.3 or later to ensure state parameter validation during the SSO flow.
What impact does CVE-2026-44347 have on users?
CVE-2026-44347 allows attackers to manipulate users into logging into an attacker's account, compromising user credentials and data.
What versions of Warpgate are affected by CVE-2026-44347?
CVE-2026-44347 affects all versions of Warpgate prior to version 0.23.3.
Is there a workaround for CVE-2026-44347?
There are no documented workarounds for CVE-2026-44347; upgrading to the latest version is the recommended solution.