CVE-2026-33875

Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing attackers to authenticate with the identities of victim users who click on a malicious deep link. Update Gematik Authenticator to version 4.16.0 or greater to receive a patch. There are no known workarounds.

CVSS v3 9.3 CRITICAL

9.3^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.8 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/gematik/app-Authenticator/security/advisories/GHSA-qg87-cf56-2rmr	Vendor Advisory
https://www.machinespirits.com/advisory/f41e56/

Configurations

Configuration 1 (hide)

cpe:2.3:a:gematik:authenticator:*:*:*:*:*:*:*:*

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Gematik Authenticator autentica de forma segura a los usuarios para iniciar sesión en aplicaciones de salud digitales. Las versiones anteriores a la 4.16.0 son vulnerables al secuestro del flujo de autenticación, lo que podría permitir a los atacantes autenticarse con las identidades de usuarios víctimas que hacen clic en un enlace profundo malicioso. Actualice Gematik Authenticator a la versión 4.16.0 o superior para recibir un parche. No se conocen soluciones alternativas.

Information

Published : 2026-03-27 21:17

Updated : 2026-10-26 22:10

NVD link : CVE-2026-33875

Mitre link : CVE-2026-33875

CVE.ORG link : CVE-2026-33875

JSON object : View

Products Affected

gematik

authenticator

CWE

CWE-940

Improper Verification of Source of a Communication Channel

{"id": "CVE-2026-33875", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-33875", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-03-30T18:57:25.759977Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "gematik", "product": "app-Authenticator", "versions": [{"status": "affected", "version": "< 4.16.0"}]}]}], "published": "2026-03-27T21:17:24.377", "references": [{"url": "https://github.com/gematik/app-Authenticator/security/advisories/GHSA-qg87-cf56-2rmr", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://www.machinespirits.com/advisory/f41e56/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-940"}]}], "descriptions": [{"lang": "en", "value": "Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing attackers to authenticate with the identities of victim users who click on a malicious deep link. Update Gematik Authenticator to version 4.16.0 or greater to receive a patch. There are no known workarounds."}, {"lang": "es", "value": "Gematik Authenticator autentica de forma segura a los usuarios para iniciar sesi\u00f3n en aplicaciones de salud digitales. Las versiones anteriores a la 4.16.0 son vulnerables al secuestro del flujo de autenticaci\u00f3n, lo que podr\u00eda permitir a los atacantes autenticarse con las identidades de usuarios v\u00edctimas que hacen clic en un enlace profundo malicioso. Actualice Gematik Authenticator a la versi\u00f3n 4.16.0 o superior para recibir un parche. No se conocen soluciones alternativas."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gematik:authenticator:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6F3F2CC-8AAB-467C-A2CB-D8D994FB4195", "versionEndExcluding": "4.16.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}