CVE-2026-117656 | pow-auth assent up to 0.3.1 Sign in with Apple Strategy apple.ex Assent.Strategy.Apple.callback user improper authorization

October 31, 2026 Yanac

A vulnerability, which was classified as critical, was found in pow-auth assent up to 0.3.1. Affected by this issue is the function Assent.Strategy.Apple.callback of the file lib/assent/strategies/apple.ex of the component Sign in with Apple Strategy. Such manipulation of the argument User leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-117656. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More