Relate · Relate · CVE-2026-41588
**Name of the Vulnerable Software and Affected Versions**
RELATE versions prior to commit 2f68e16
**Description**
A timing attack exists in the `check sign in key()` function within the `course/auth.py` file. A timing attack is a side-channel attack where an attacker attempts to compromise a system by analyzing the time it takes to execute specific algorithms.
**Recommendations**
Update to the version containing commit 2f68e16.
As a temporary workaround, restrict access to the `check sign in key()` function to minimize the risk of exploitation.