CVE-2026-89420 | ZenHive mpp up to 0.16.1 Accept Voucher actions.ex MPP.Session.Actions.accept_voucher authentication replay (EUVD-2026-84360)

September 22, 2026 Yanac

A vulnerability described as critical has been identified in ZenHive mpp up to 0.16.1. This impacts the function MPP.Session.Actions.accept_voucher of the file lib/mpp/session/actions.ex of the component Accept Voucher. Executing a manipulation can lead to authentication bypass by capture-replay.

This vulnerability is handled as CVE-2026-89420. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More