CVE-2026-78223 | team-alembic ash_authentication up to 4.14.0/5.0.0-rc.13 Token Revocation token signature verification

September 17, 2026 Yanac

A vulnerability has been found in team-alembic ash_authentication up to 4.14.0/5.0.0-rc.13 and classified as problematic. Affected by this vulnerability is the function AshAuthentication.TokenResource.RevokeTokenChange.change of the component Token Revocation. Performing a manipulation of the argument token results in improper verification of cryptographic signature.

This vulnerability is known as CVE-2026-78223. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More