CVE-2026-126539 | Directus up to 12.0.x Authentication handleAuthRequest authorization

November 11, 2026 Yanac

A vulnerability identified as critical has been detected in Directus up to 12.0.x. The impacted element is the function handleAuthRequest of the component Authentication Handler. The manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-126539. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More