PT-2026-60204 · Unknown · Vaultwarden

CVE-2026-47164 · Published 2026-07-15 · Updated 2026-07-16

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Vaultwarden versions prior to 1.36.0

Description The SSO login flow fails to verify the email verified claim from the Identity Provider (IdP) when the SSO SIGNUPS MATCH EMAIL variable is set to true during the linking of an IdP identity to an existing local account. This allows an attacker to use a controlled IdP identity that asserts a victim's email address to bind to and authenticate as that local account.

Recommendations Update to version 1.36.0.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-47164

GHSA-6X5C-84VM-5J56

Affected Products

Vaultwarden

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47164.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-47164 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47164 · Security Note
• https://github.com/dani-garcia/vaultwarden/commit/d297e274a35dccd0f5d935e9d5934e0f7e9c0a87 · Note
• https://github.com/dani-garcia/vaultwarden/pull/7163 · Note
• https://github.com/dani-garcia/vaultwarden/releases/tag/1.36.0 · Note
• https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6x5c-84vm-5j56 · Note
• https://twitter.com/TuringCyberObs/status/2077696768611881077 · Twitter Post