CVE-2026-121543

The smart-sso application, versions through 2.0.1 , is vulnerable to an incorrect authorization flaw within the PermissionFilter component. This vulnerability occurs because unlisted paths are permitted by default, allowing any authenticated user to access restricted admin console APIs . An attac...