PT-2026-29312 · Scitokens · Scitokens

Pmcao · Publicado 2026-03-31 · Atualizado 2026-04-02 · CVE-2026-32725

Positive Technologies (AI Summary)

CVSS v3.1

8.3

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions SciTokens C++ versions prior to 1.4.1

Description SciTokens C++ is a library for creating and using SciTokens. Versions before 1.4.1 have an authorization bypass when handling path-based scopes within tokens. The library normalizes the scope path, collapsing ".." path components instead of rejecting them. This allows an attacker to use parent directory traversal in the scope claim to expand authorization beyond the intended directory. The vulnerability occurs during the processing of the scope claim within SciTokens.

Recommendations Update to SciTokens C++ version 1.4.1 or later.

Exploit

Correção

Relative Path Traversal

Enumeração de Fraquezas

CWE-23

Identificadores relacionados

CVE-2026-32725

GHSA-RQCX-MC9W-PJXP

Produtos afetados

Scitokens

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32725.json · Exploit
• https://github.com/scitokens/scitokens-cpp/commit/7951ed809967d88c00c20de414b1ff74df8c3e08 · Correção
• https://github.com/scitokens/scitokens-cpp/security/advisories/GHSA-rqcx-mc9w-pjxp · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-32725 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2026-32725 · Nota de Segurança
• https://ubuntu.com/security/CVE-2026-32725 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-32725 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-32725 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2026-32725 · Aviso do Fabricante
• https://twitter.com/TheHackerWire/status/2039047584933920944 · Publicação no Twitter
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-32725 · Aviso do Fabricante