Lara Dashboard versions prior to 1.3.0 are vulnerable to an authentication bypass in the screenshot-login route that permits unauthenticated access to any user account when APP_ENV is not set to production.
Lara Dashboard +2
vulnerability
authorization-bypass
remote-code-execution
web-application
ssrf
cve-2026-87821
2r
3t
1c
updated