Skip to content
Threat Feed

Product

Crabbox < V0.12.0

1 brief RSS
high advisory

Crabbox Authentication Bypass via Header Spoofing (CVE-2026-8621)

Crabbox prior to v0.12.0 contains an authentication bypass vulnerability (CVE-2026-8621) that allows non-admin shared-token callers to impersonate other owners or organizations by spoofing identity headers, granting unauthorized access to lease operations.

Crabbox < v0.12.0 authentication-bypass header-spoofing cve-2026-8621
2r 1t 1c