Unrated severityNVD Advisory· Published Jul 8, 2026· Updated Jul 16, 2026

CVE-2026-31309

Description

Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node takeover via a crafted POST request.

Affected products

Mysterium Network/nodellm-create
Range: v1.21.1-rc0 <= version < v1.36.0

Patches

Vulnerability mechanics

References

github.com/mysteriumnetwork/node/commit/bc099fcaff59fee9c8a8f8e07ffff5b3c5df2bb9mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000