CVE-2026-85638: jofpin trape user.py authorization
A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The issue is remotely exploitable with low attack complexity and requires no privileges or user interaction. Exploitation involves manipulating the vId/id argument in an unknown part of core/user.py.
Is exploit code available?
Yes. The exploit has been publicly disclosed and could be used in attacks.
Which release is identified as affected?
The available information identifies jofpin trape 2.0 as affected. No fixed version or vendor response is provided.
Is a patch or workaround available?
No patch, workaround, or mitigation is described. The project was notified through an issue report but had not responded at the time of publication.