CVE-2026-43639 | bitwarden server up to 2026.4.0 existing authorization

A vulnerability, which was classified as problematic, has been found in bitwarden server up to 2026.4.0. Affected is an unknown function of the file /providers/{providerId}/clients/existing. This manipulation causes missing authorization.

This vulnerability appears as CVE-2026-43639. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More