GHSA-mmvv-wwj3-vgj8CriticalCVSS 9.8
nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows...
🔗 CVE IDs covered (1)
📋 Description
nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-117564
- https://github.com/buqiyuan/nest-admin/issues/92
- https://github.com/buqiyuan/nest-admin/issues/93
- https://github.com/buqiyuan/nest-admin/commit/f2cec8cb776cbf113115b33164dac69a46d24097
- https://github.com/buqiyuan/nest-admin
- https://github.com/buqiyuan/nest-admin/blob/2eeccc4cb699d1aedbe04b4437a9d095cde02c74/.env.production#L5
- https://www.vulncheck.com/advisories/nest-admin-before-1.0.1-authentication-bypass-via-hardcoded-jwt-secret
- https://github.com/advisories/GHSA-mmvv-wwj3-vgj8