CVE-2026-100169

The Prowler API (versions 5.4.0 to before 5.35.0) contains an improper authentication vulnerability in its social account linking path. The root cause is that ProwlerSocialAccountAdapter.pre_social_login() links Google or GitHub logins to any existing local account with a matching email address w...