CVE-2026-72691

creationtimestamp| type| source ---|---|--- 2026-08-10 16:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msqhvkuytv24...

CVE-2026-72691

An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...

CVE-2026-72691

OpenSignLabs opensignserver (up to version 2.37.0) has an authentication bypass vulnerability. An unauthenticated remote attacker can mint MASTER_KEY-signed file access tokens for arbitrary stored files via the getsignedurl cloud function. The function bypasses its isAuthenticated check when any ...