CVE-2026-75106: OpnForm Editable Submission Secret Derivation via Empty Hashids Salt
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any submission. Attackers can read other respondents' full submission data through the submission-fetch endpoint or overwrite submissions by supplying predicted hashes to the answer endpoint.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-75106?
CVE-2026-75106 has a critical severity rating of 9.1.
How do I fix CVE-2026-75106?
To mitigate CVE-2026-75106, ensure that OpnForm is updated to a version that uses a non-empty salt for Hashids in editable submission secret derivation.
What are the implications of CVE-2026-75106?
CVE-2026-75106 allows unauthenticated attackers to read and overwrite submissions of other users due to predictable hash derivation.
Which software is affected by CVE-2026-75106?
CVE-2026-75106 affects the OpnForm Editable Submission system.
Can attackers exploit CVE-2026-75106 without authentication?
Yes, attackers can exploit CVE-2026-75106 without needing to authenticate.