CVE-2026-27801

A flaw was found in Vaultwarden. An authenticated attacker could bypass two-factor authentication 2FA to perform sensitive actions. This bypass allows the attacker to access a user's API key or delete a user's vault and associated organizations where the user is an administrator or owner. This...

CVE-2026-27801

creationtimestamp| type| source ---|---|--- 2026-03-04 18:57:19+00:00| published-proof-of-concept| https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-v6pg-v89r-w8wr 2026-03-04 23:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgbi64ynsm2v...