CVE-2026-54238 | Supabase Realtime up to 2.103.0 Broadcast improper authentication

October 22, 2026 Yanac

A vulnerability was found in Supabase Realtime up to 2.103.0. It has been classified as problematic. Impacted is an unknown function of the component Broadcast. This manipulation causes improper authentication.

This vulnerability appears as CVE-2026-54238. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More