← Database

CVE-2026-123196

HIGH CVSS: 8.1 Published: 2026-11-05 Modified: 2026-11-05

Description

Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-authorizer-url gRPC metadata. Attackers can send this metadata to the gRPC port or a Grpc-Metadata-X-Authorizer-Url header through the REST gateway to capture reset or magic-link tokens and take over accounts.

Affected Platforms

Unknown

Weakness Type

CWE-640

References