CVE-2026-124679 | Apache APISIX Forward Auth jwe-decrypt/forward-auth identity improper authentication

November 13, 2026 Yanac

A vulnerability was found in Apache APISIX and classified as critical. Affected by this issue is the function jwe-decrypt/forward-auth of the component Forward Auth. The manipulation of the argument identity results in improper authentication.

This vulnerability is identified as CVE-2026-124679. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More