CVE-2026-74894: openssl_encrypt before 1.4.0 Authentication Bypass via Bearer Token
opensslencrypt before 1.4.0 contains an authentication bypass vulnerability in the verifyapitoken function that accepts any non-empty Bearer token string without validation. Attackers can upload arbitrary public keys, enumerate all keys, and revoke keys belonging to any user by providing any Bearer token in the Authorization header.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74894?
CVE-2026-74894 has a critical severity rating of 9.8.
What is the main issue with CVE-2026-74894?
CVE-2026-74894 allows for an authentication bypass due to the verify_api_token function's failure to validate non-empty Bearer tokens.
How do I fix CVE-2026-74894?
To mitigate CVE-2026-74894, upgrade to a version of openssl_encrypt that is 1.4.0 or later.
What are the potential impacts of CVE-2026-74894?
CVE-2026-74894 can lead to unauthorized access where attackers can upload and manage public keys of any user.
Who is affected by CVE-2026-74894?
Any user or application relying on openssl_encrypt versions before 1.4.0 is potentially affected by CVE-2026-74894.