Critical severity9.6NVD Advisory· Published Aug 10, 2026· Updated Aug 10, 2026

CVE-2026-72564

Description

An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an access token issued for a different resource.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fosrl/Pangolinllm-fuzzy
Range: <=1.20.0

Patches

Vulnerability mechanics

References

github.com/fosrl/pangolin/blob/main/server/routers/resource/authWithAccessToken.tsnvd

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000