Skip to content
Threat Feed
Subscribe

Vendor

Duplicati

1 brief RSS
high advisory

Duplicati JWT Signing Key Exposure via Guard Bypass

An unpatched vulnerability in Duplicati 2.2.0.3 allows authenticated attackers to bypass security guards and extract JWT signing keys to forge administrative tokens.

Duplicati webapps privilege-escalation jwt
1r 1t