CVE-2026-123196highCWE-640

CVE-2026-123196: high-severity vulnerability in authorizerdev authorizer

Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata

Published

Follow this CVE+ Monitor authorizer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6
Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-authorizer-url gRPC metadata. Attackers can send this metadata to the gRPC port or a Grpc-Metadata-X-Authorizer-Url header through the REST gateway to capture reset or magic-link tokens and take over accounts.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
authorizerdev · authorizer
Related CVEs — authorizerdev authorizer

In the same product, most dangerous first.

CVE-2026-54072CRITICALAuthorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URLEPSS 0.5%