CVE-2026-73519

creationtimestamp| type| source ---|---|--- 2026-08-12 22:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw6kiup3g2f 2026-08-12 23:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswab4oweq2l 2026-08-13 03:00:31+00:00| seen|...

CVE-2026-73519

WolfStack before version 25.9.2 contains a hard-coded cluster-authentication secret compiled into builds (src/auth/mod.rs). Attackers can bypass require_auth() by sending the secret in the X-WolfStack-Secret header, without a session, API key, or user account. From a management port, an attacker ...