critical9.6
CVE-2026-72564
An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organi…
Impact
An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an access token issued for a different resource.
Affected products
| Product | Affected versions |
|---|---|
| Fosrl/Pangolin | through 1.20.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.