{"id":"CVE-2026-117564","title":"nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret","summary":"nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the …","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-321"],"vendor":"buqiyuan","product":"nest-admin","affected":["nest-admin < 1.0.1"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-28T15:56:42.754470Z"},"published":"2026-10-27","updated":"2026-10-28","sourceUpdated":"2026-10-28T16:16:56.709Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-117564","references":[{"url":"https://github.com/buqiyuan/nest-admin/issues/93","label":"GitHub Issue #93"},{"url":"https://github.com/buqiyuan/nest-admin"},{"url":"https://github.com/buqiyuan/nest-admin/commit/f2cec8cb776cbf113115b33164dac69a46d24097"},{"url":"https://github.com/buqiyuan/nest-admin/issues/92","label":"GitHub Issue #92"},{"url":"https://github.com/buqiyuan/nest-admin/blob/2eeccc4cb699d1aedbe04b4437a9d095cde02c74/.env.production#L5"},{"url":"https://www.vulncheck.com/advisories/nest-admin-before-1.0.1-authentication-bypass-via-hardcoded-jwt-secret","label":"VulnCheck Advisory: nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret"}],"tags":["cve.org"],"epss":0.00599,"epssPercentile":0.48533,"ingestedAt":"2026-10-27T16:11:59.335Z","slug":"CVE-2026-117564","body":"## Overview\n\nnest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access.\n\n## Affected\n\n- `nest-admin < 1.0.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}