Cpe:2.3:a:bytebase:bytebase:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3abytebasebytebase/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 22 Oct 2026 22:28:59 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgBytebase: Authentication bypass via GitLab provider configuration (CVE-2022-51026)https://feed.craftedsignal.io/briefs/2026-10-bytebase-auth-bypass/Thu, 22 Oct 2026 22:28:59 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-bytebase-auth-bypass/Bytebase versions prior to 1.0.1 are vulnerable to an authentication bypass in the GitLab login flow, allowing unauthenticated attackers to impersonate any user, including administrative accounts.Bytebase versions prior to 1.0.1 contain an authentication bypass vulnerability (CVE-2022-51026) in the /api/auth/login/GITLAB_SELF_HOST endpoint. The vulnerability exists because the application improperly trusts client-supplied GitLab provider configuration. An attacker can supply a malicious instanceUrl pointing to a server they control, which returns a fabricated active user response. Bytebase uses this response to generate session tokens, enabling the attacker to impersonate arbitrary users or create new accounts with elevated privileges.

Impact

Successful exploitation allows unauthenticated attackers to gain unauthorized access to the Bytebase instance by impersonating existing users, including the Owner role, or by creating new members.

Recommendation

  • Upgrade Bytebase to version 1.0.1 or later immediately.
  • Review access logs and audit trails for unexpected authentication events or suspicious user creations within Bytebase if the instance was exposed during the vulnerable period.
  • Disable GitLab self-hosted authentication providers if they are not actively required for environment workflows.
]]>criticaladvisory