CVE-2026-102266 | jpadilla PyJWT up to 2.13.0 PyJWK verification path HMACAlgorithm.from_jwk improper authentication

September 28, 2026 Yanac

A vulnerability was found in jpadilla PyJWT up to 2.13.0. It has been classified as critical. This affects the function HMACAlgorithm.from_jwk of the component PyJWK verification path. Performing a manipulation of the argument k results in improper authentication.

This vulnerability is identified as CVE-2026-102266. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More