THREAT OPS › Threat News › [NVD] CVE-2026-55735 — Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token.
Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it o
[NVD] CVE-2026-55735 — Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it o
CVE-2026-55735 CVSS: None Published: 2026-08-01T19:16:42.510
Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token.
Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resul
Indicators of compromise
- CVE-2026-55735cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-55735