CVE-2026-55493 HotCRP: comment-author search exposes anonymous commenter identities

HotCRP is conference review software. Starting with 2.101, the cmt: search term checks whether a comment is visible to the searching user but fails to check whether the commenter's identity should be visible. A cmt:USER search can therefore match a paper with a visible comment authored by USER ev...

CVE-2026-55493

The conference review software HotCRP is vulnerable to an identity exposure issue in its cmt: search term functionality starting with version 2.101 . The root cause is a failure to verify if a commenter's identity should be visible during a search; specifically, a cmt:USER search can match papers...

CVE-2026-55493 HotCRP: comment-author search exposes anonymous commenter identities

HotCRP is conference review software. Starting with 2.101, the cmt: search term checks whether a comment is visible to the searching user but fails to check whether the commenter's identity should be visible. A cmt:USER search can therefore match a paper with a visible comment authored by USER ev...