CVE-2026-43912 - Vulnerability Analysis

Overview

Vaultwarden prior to 1.35.5 contains a broken access control vulnerability caused by lack of organization consistency checks in group-management endpoints, letting attackers with admin rights in one organization access and modify data in another organization.

Severity & Score

Impact

Attackers can gain unauthorized read and write access to vault data of other organizations, compromising confidentiality and integrity.

Mitigation

Update to version 1.35.5 or later.

References

• https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-569v-845w-g82p

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner