CVE-2026-85392: medium-severity vulnerability in Peppermint-Lab peppermint
Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.5%
Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint that allows authenticated attackers to delete sessions for any user by supplying arbitrary user IDs. Attackers can forcibly log out any user including administrators by calling the logout handler with another user's ID, since the endpoint performs no authorization checks to verify the caller owns the target account.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected products
Peppermint-Lab · peppermintRelated CVEs — Peppermint-Lab peppermint
In the same product, most dangerous first.
References
https://github.com/Peppermint-Lab/pepperminthttps://github.com/Peppermint-Lab/peppermint/blob/0.5.5/apps/api/src/controllers/auth.tshttps://github.com/Peppermint-Lab/peppermint/issues/529https://www.vulncheck.com/advisories/peppermint-through-0.5.5-authorization-bypass-on-the-user-logout-endpoint