CVE-2026-55881 | OpenReplay up to 1.26.x Session Access Validation getFirstMob path authentication replay

July 10, 2026 Yanac

A vulnerability marked as critical has been reported in OpenReplay up to 1.26.x. The affected element is the function getFirstMob of the component Session Access Validation. This manipulation of the argument path causes authentication bypass by capture-replay.

This vulnerability is tracked as CVE-2026-55881. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More