CVE-2026-119215 | team-alembic ash_authentication up to 5.0.0-rc.15 Totp Strategy authorization

November 3, 2026 Yanac

A vulnerability has been found in team-alembic ash_authentication up to 5.0.0-rc.15 and classified as critical. This vulnerability affects the function AshAuthentication.Strategy.Totp.ConfirmSetupChange of the component Totp Strategy. The manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-119215. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More