CVE-2026-63400Low· 2.3▾ SunlitCoop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the password row without invalidating database-backed sessions. An attacker who has acquired a password and established a sessi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 12.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, resetPasswordForToken updates the password row without invalidating database-backed sessions. An attacker who has acquired a password and established a session retains access even after the legitimate user resets the password, leaving the compromised account under attacker control until the session expires at its 30-day maximum age. This issue is fixed in version 1.0.2.
coop < 1.0.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-63398High· 7.4Coop has SAML cross-tenant authentication bypass
CVE-2026-63401Medium· 5.3Coop has cross-org IDOR in addAccessibleQueuesForUser / removeAccessibleQueuesForUser
CVE-2026-63396High· 8.7Coop has a data leak via unauthenticated GraphQL Query.allOrgs
CVE-2026-63399Medium· 6.9Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg
CVE-2025-54547Medium· 5.3On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired
CVE-2026-44188Medium· 5.3Ansible-lightspeed: ansible lightspeed: session hijacking and unauthorized data access due to insufficient session expiration