CVE-2026-114618 | Authlib up to 1.8.x JWT Bearer Grant JWTBearerGrant.get_audiences improper authorization

October 22, 2026 Yanac

A vulnerability was found in Authlib up to 1.8.x. It has been declared as critical. The affected element is the function JWTBearerGrant.get_audiences of the component JWT Bearer Grant. The manipulation results in improper authorization.

This vulnerability was named CVE-2026-114618. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More