Bitwarden Server before 2026.10.1 Authorization Bypass via POST /api/ciphers/create

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows organization members to add ciphers to collections they cannot edit. Attackers can call POST /api/ciphers/create, where a nulled UserId is treated as administrative, to inject vault items synced to read-only or inaccessible collections' members.

Etkilenen sürümler1 yazılım

Kaynaklar10 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…ommit/9030c42bf7d8f9ac2ff9fee85c39588d5eb81499 Yama
• github.com/bitwarden/server/pull/8482 Yama
• abraxaslabs.tech/research/bitwarden-cipher-create-acl Üçüncü taraf
• vulncheck.com/…thorization-bypass-via-post-api-ciphers-create Üçüncü taraf
• github.com/…amework/Vault/Repositories/CipherRepository.cs Diğer
• github.com/…src/Api/Vault/Controllers/CiphersController.cs Diğer
• github.com/bitwarden/server/releases/tag/v2026.10.1 Diğer
• github.com/bitwarden/server Diğer

Kayıt geçmişi

1. 30 Eki 2026 14:30Yayımlandı

İlgili açıklar

• 4,4 CVE-2026-119573Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret
• 5,1 CVE-2025-68392Incorrect authorization in Protectel
• 2,5 CVE-2026-119377SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING
• 4,3 CVE-2026-119147ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass
• 6,5 CVE-2026-118952Kroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization rules
• 6,5 CVE-2026-119200Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes