HIGH 8.6 NVD
CVE-2026-123196
Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-aut
Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-authorizer-url gRPC metadata. Attackers can send this metadata to the gRPC port or a Grpc-Metadata-X-Authorizer-Url header through the REST gateway to capture reset or magic-link tokens and take over accounts.
References
- https://github.com/authorizerdev/authorizer/blob/0bceb94f0ab726d9c396202f4d8fbedee1dc9cab/
- https://github.com/authorizerdev/authorizer/blob/0bceb94f0ab726d9c396202f4d8fbedee1dc9cab/
- https://github.com/authorizerdev/authorizer/commit/b5012cbcdc7c32dcb4bd43179a212055e7fcb86
- https://github.com/authorizerdev/authorizer/pull/814
- https://github.com/authorizerdev/authorizer/releases/tag/2.4.2
This high severity vulnerability with a CVSS score of 8.6 was published on 2026-11-05 via NVD.
vulnfeed aggregates 16740 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.