CVE-2026-105040 | EnergizeLab NestJS auth service 1.8.2 Account Update user ID dynamically-determined object attributes

A vulnerability was found in EnergizeLab NestJS auth service 1.8.2. It has been rated as critical. Affected is an unknown function of the component Account Update. Performing a manipulation of the argument user ID results in dynamically-determined object attributes.

This vulnerability was named CVE-2026-105040. The attack may be initiated remotely. There is no available exploit.

This product is a managed service. This means that users cannot maintain vulnerability countermeasures themselves.VulDB Recent EntriesRead More