CVE-2026-90505 | vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46 doUpdateLicenseKey race condition

September 12, 2026 Yanac

A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46 and classified as problematic. This affects the function doUpdateLicenseKey. The manipulation results in race condition. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is reported as CVE-2026-90505. The attack can be launched remotely. Moreover, an exploit is present.

This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More