GHSA-crpx-jj3g-c9f4CriticalCVSS 9.8
OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows...
🔗 CVE IDs covered (1)
📋 Description
OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid JWTs by setting the client-controlled is_local_auth field. Attackers can send a POST /api/v1/user/login/ request for the admin account with an invalid password and is_local_auth true to gain SuperUser administrative access.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-126768
- https://gist.github.com/neelkotnis/4676fe10859d84900025cf52188dae46
- https://opstree.com/rems-ai-powered-observability
- https://www.vulncheck.com/advisories/opstree-rems-through-1.0.0-authentication-bypass-via-is-local-auth-flag
- https://github.com/advisories/GHSA-crpx-jj3g-c9f4