GHSA-6wg9-frw9-v5phCriticalCVSS 7.4
OpsTree BuildPiper before 2.7.0 lacks rate limiting on password-reset OTP verification, allowing...
🔗 CVE IDs covered (1)
📋 Description
OpsTree BuildPiper before 2.7.0 lacks rate limiting on password-reset OTP verification, allowing unauthenticated attackers to brute force 6-digit OTPs. Attackers can initiate a reset and submit unthrottled guesses to the check_otp endpoint, resetting the target's password and taking over the account.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-127079
- https://gist.github.com/neelkotnis/c3c9d02c324a73937ca4db81f223435e
- https://www.buildpiper.io
- https://www.vulncheck.com/advisories/opstree-buildpiper-before-2.7.0-otp-brute-force-via-password-reset-check-otp
- https://github.com/advisories/GHSA-6wg9-frw9-v5ph