CVE-2026-91998 | Casdoor up to 4.4.0 /api/mcp authorization

September 15, 2026 Yanac

A vulnerability identified as critical has been detected in Casdoor up to 4.4.0. The impacted element is an unknown function of the file /api/mcp. The manipulation leads to authorization bypass.

This vulnerability is uniquely identified as CVE-2026-91998. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More