VYPR

Rote

by Rote

CVEs (1)

  • CVE-2026-126803HigNov 11, 2026
    risk 0.40cvss 7.2epss —

    Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain super_admin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group…