CVE-2026-73418 | nextauthjs next-auth JWT /core/jwt getToken bearer input validation

A vulnerability was found in nextauthjs next-auth. It has been rated as problematic. This vulnerability affects the function getToken of the file /core/jwt of the component JWT. The manipulation of the argument bearer leads to improper input validation.

This vulnerability is traded as CVE-2026-73418. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More