Skip to content
Threat Feed

Product

Crabbox Coordinator (< 0.9.0)

1 brief RSS
high advisory

Crabbox Coordinator Authentication Bypass Vulnerability (CVE-2026-45223)

Crabbox before 0.9.0 is vulnerable to an authentication bypass (CVE-2026-45223) in the coordinator user-token verification, allowing attackers with a non-admin token to escalate privileges to full coordinator admin access by crafting a malicious user-token with an 'admin: true' claim.

Crabbox +1 authentication-bypass privilege-escalation cve
2r 1t 1c