CVE-2026-34460 | NamelessMC Nameless up to 2.2.4 state authentication bypass by assumed-immutable data (GHSA-pmpw-2xvh-5xj6)

A vulnerability described as critical has been identified in NamelessMC Nameless up to 2.2.4. This affects an unknown function. Executing a manipulation of the argument state can lead to authentication bypass by assumed-immutable data.

This vulnerability is tracked as CVE-2026-34460. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More