CVE-2026-34531

{"id": "CVE-2026-34531", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34531", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-02T15:13:05.354180Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.2, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "miguelgrinberg", "product": "Flask-HTTPAuth", "versions": [{"status": "affected", "version": "< 4.8.1"}]}]}], "published": "2026-04-01T21:17:01.147", "references": [{"url": "https://github.com/miguelgrinberg/Flask-HTTPAuth/releases/tag/v4.8.1", "tags": ["Product", "Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/miguelgrinberg/Flask-HTTPAuth/security/advisories/GHSA-p44q-vqpr-4xmg", "tags": ["Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/miguelgrinberg/flask-httpauth/commit/b15ffe9e50e110d7174ccd944f642079e1dcf9ee", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00049.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-287"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes a request to a token protected resource without passing a token, or passing an empty token, Flask-HTTPAuth would invoke the application's token verification callback function with the token argument set to an empty string. If the application had any users in its database with an empty string set as their token, then it could potentially authenticate the client request against any of those users. This issue has been patched in version 4.8.1."}, {"lang": "es", "value": "Flask-HTTPAuth proporciona autenticaci\u00f3n HTTP Basic, Digest y por Token para rutas de Flask. Antes de la versi\u00f3n 4.8.1, en una situaci\u00f3n donde el cliente realiza una solicitud a un recurso protegido por token sin pasar un token, o pasando un token vac\u00edo, Flask-HTTPAuth invocar\u00eda la funci\u00f3n de callback de verificaci\u00f3n de token de la aplicaci\u00f3n con el argumento del token establecido como una cadena vac\u00eda. Si la aplicaci\u00f3n ten\u00eda usuarios en su base de datos con una cadena vac\u00eda establecida como su token, entonces podr\u00eda potencialmente autenticar la solicitud del cliente contra cualquiera de esos usuarios. Este problema ha sido parcheado en la versi\u00f3n 4.8.1."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:miguelgrinberg:flask-httpauth:*:*:*:*:*:python:*:*", "vulnerable": true, "matchCriteriaId": "27C90FDD-EF05-4AF2-BDE6-4E47481562E2", "versionEndExcluding": "4.8.1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}