CVE-2026-45051 | OpenIdentityPlatform OpenAM up to 16.1.0 WebAuthn Authentication loadAuthenticators userAttribute deserialization

September 15, 2026 Yanac

A vulnerability, which was classified as critical, was found in OpenIdentityPlatform OpenAM up to 16.1.0. This affects the function loadAuthenticators of the component WebAuthn Authentication. Executing a manipulation of the argument userAttribute can lead to deserialization.

This vulnerability appears as CVE-2026-45051. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More