Casdoor

5 known vulnerabilities in Casdoor, 3 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-105307 CVSS 5.5 medium A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authz_filter.go of the…
  • CVE-2026-91998 CVSS 9.4 critical Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any application's…
  • CVE-2026-90942 CVSS 9.3 critical Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert…
  • CVE-2026-84423 CVSS 5.5 medium A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the…
  • CVE-2026-15630 CVSS 9.9 critical A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by…