Tag

Cve-2026-82409

1 brief RSS

Authorization Bypass in Klever-Go KleverUpdateAccountPermission Built-in

An authorization flaw in the Klever-Go VM allows attackers to execute an account takeover by leveraging an incorrectly validated RecipientAddr parameter during indirect smart contract calls.

klever-go +2 blockchain smart-contract vulnerability privilege-escalation log-manipulation unauthenticated-access websocket-vulnerability consensus-failure +6

1r 7t updated 54m ago