CVE-2026-91164 | Warp-Tech Warpgate up to 0.27.2 HTTP API Token Authentication common.rs UserToken improper authorization

A vulnerability was found in Warp-Tech Warpgate up to 0.27.2 and classified as problematic. The affected element is the function RequestAuthorization::UserToken of the file warpgate-protocol-http/src/common.rs of the component HTTP API Token Authentication. The manipulation results in improper authorization.

This vulnerability is identified as CVE-2026-91164. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More