CVE-2026-55880 | OpenReplay up to 1.27.0 Dashboard/Note Mutation authentication replay

July 10, 2026 Yanac

A vulnerability was found in OpenReplay up to 1.27.0 and classified as critical. Affected is the function notes.delete/dashboards.update_widget/dashboards.remove_widget of the component Dashboard/Note Mutation. The manipulation results in authentication bypass by capture-replay.

This vulnerability is known as CVE-2026-55880. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More