CVE-2026-78426 Logout bypass via alternate JWT spelling
LowCVSS 2.0
EPSS 0.19%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of NeuVector, can continue using the non-expired token with equivalent spelling of the RSA signature field until the token validity expires.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE NeuVector | < 5.6.2 | 5.6.2 |
References
- github.com vendor-advisory
- bugzilla.suse.com issue-tracking