https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 18:50:46 +0000 https://db.gcve.eu/vuln/cve-2026-119420 <p><strong>Affected:</strong> getlago lago</p> <p>Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session tokens for existing accounts via the acceptInvite mutation without a password check. Attackers can invite a victim&#39;s email, accept with an arbitrary password, and receive a JWT to access the victim&#39;s organizations, billing data, API keys and payment integrations.</p> <p><strong>Affected:</strong> getlago lago</p> <p>Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session tokens for existing accounts via the acceptInvite mutation without a password check. Attackers can invite a victim&#39;s email, accept with an arbitrary password, and receive a JWT to access the victim&#39;s organizations, billing data, API keys and payment integrations.</p> https://db.gcve.eu/vuln/cve-2026-119420