Skip to content
Threat Feed
Subscribe

Tag

ORY Oathkeeper

1 brief RSS
critical advisory

ORY Oathkeeper Authorization Bypass via Path Traversal (CVE-2026-33494)

ORY Oathkeeper versions prior to 26.2.0 are vulnerable to an authorization bypass (CVE-2026-33494) via HTTP path traversal, enabling attackers to access protected resources by crafting URLs with path traversal sequences.

Oathkeeper CVE-2026-33494 ORY Oathkeeper path traversal authorization bypass
2r 1t