CVE-2026-73085 | advplyr Audiobookshelf up to 2.35.x TokenManager TokenManager.js jwtAuthCheck improper authentication

A vulnerability categorized as critical has been discovered in advplyr Audiobookshelf up to 2.35.x. Impacted is the function jwtAuthCheck of the file server/auth/TokenManager.js of the component TokenManager. Such manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-73085. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More