What is GHSA-9cjx-rmhj-qc37?

GHSA-9cjx-rmhj-qc37 is a security advisory published by GitHub Security Advisories with Critical severity. Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController:...

Which CVE IDs does GHSA-9cjx-rmhj-qc37 cover?

GHSA-9cjx-rmhj-qc37 covers the following CVE IDs: CVE-2026-116199. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9cjx-rmhj-qc37?

GHSA-9cjx-rmhj-qc37 has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

GHSA-9cjx-rmhj-qc37CriticalCVSS 8.1

Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController:...

Vendor

GitHub Security Advisories

Published

October 25, 2026

Last Modified

October 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-116199 →

📋 Description

Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the user whose username matches the Google account email without enforcing the activated flag. Deactivated users with email-shaped usernames and still-live Google identities can sign in via Google SSO and regain sessions at their original permission level, including admin.

🔗 References (4)

https://github.com/grokability/snipe-it/security/advisories/GHSA-xf36-wx48-5rqp
https://nvd.nist.gov/vuln/detail/CVE-2026-116199
https://www.vulncheck.com/advisories/snipe-it-before-8.6.3-authentication-bypass-via-google-sso-callback
https://github.com/advisories/GHSA-9cjx-rmhj-qc37