CVE-2026-53431 | malach-it Boruta 2.3.0-2.3.6 OAuth Request Base Expiration Check base.ex Boruta.Oauth.Request.Base.check_expiration/1 authentication replay

July 30, 2026 Yanac

A vulnerability classified as critical was found in malach-it Boruta 2.3.0-2.3.6. This affects the function Boruta.Oauth.Request.Base.check_expiration/1 of the file lib/boruta/oauth/request/base.ex of the component OAuth Request Base Expiration Check. Executing a manipulation can lead to authentication bypass by capture-replay.

This vulnerability is tracked as CVE-2026-53431. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More