CVE-2026-57176: falha de média gravidade em python-social-auth social-core
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.2%
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend user_id as the social-auth UID. When multiple Vend shops authenticate through the same application, users from different shops with the same internal Vend user ID could collide in the social-auth association table. A user from one shop could then be authenticated as the local account previously associated with the same numeric user ID from another shop. The issue affects applications using the Vend OAuth2 backend with more than one Vend shop. Version 5.0.0 patches the issue.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
python-social-auth · social-coreCVEs relacionadas — python-social-auth social-core
No mesmo produto, das mais perigosas para as menos.
CVE-2026-57175MEDIUMsocial-auth-core has an Improper Authentication issueEPSS 0.2%CVE-2026-57178HIGHsocial-auth-core: VK App backend accepts unsigned callback data when auth_key is missingEPSS 0.2%CVE-2026-57179MEDIUMsocial-auth-core has a Session Fixation issueEPSS 0.2%CVE-2026-115910MEDIUMPython Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victimEPSS 0.2%CVE-2026-62322MEDIUMPython Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)EPSS 0.2%CVE-2026-57177MEDIUMsocial-auth-core has Login CSRF via Missing State Parameter in LoginRadius BackendEPSS 0.1%