Skip to content
Threat Feed

Vendor

Stigmem

1 brief RSS
critical advisory

Stigmem Node Authentication Bypass Vulnerability

Stigmem nodes configured with authentication disabled could grant broad read/write/federation capabilities if exposed outside a loopback-only local development environment, leading to privilege escalation if exposed to untrusted networks; version 0.9.0a2 addresses this issue by disabling unauthenticated operations outside of loopback environments.

stigmem-node authentication-bypass privilege-escalation stigmem
2r 1t