CVE-2026-102272 | jpadilla PyJWT up to 2.13.x raw-JWK detector jwt/algorithms.py HMACAlgorithm.prepare_key improper authentication

September 28, 2026 Yanac

A vulnerability marked as critical has been reported in jpadilla PyJWT up to 2.13.x. Affected by this vulnerability is the function HMACAlgorithm.prepare_key of the file jwt/algorithms.py of the component raw-JWK detector. The manipulation leads to improper authentication.

This vulnerability is documented as CVE-2026-102272. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More