CVE-2026-22806 | loft-sh loft up to 4.3.9/4.4.1/4.5.2 authorization (GHSA-c539-w4ch-7wxq)

January 30, 2026 Yanac

A vulnerability was found in loft-sh loft up to 4.3.9/4.4.1/4.5.2. It has been classified as critical. Impacted is an unknown function. Performing a manipulation results in incorrect authorization.

This vulnerability is known as CVE-2026-22806. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More