Skip to content

Product

Peppermint Lab Peppermint vulnerabilities

2 published CVES affecting Peppermint Lab Peppermint, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Peppermint Lab Peppermint CVEs

Newest publication first

  1. CVE-2026-72561 Peppermint Lab Peppermint - Broken Access Control

    Published
    HighCVSS 8.8 EPSS 0.42%

    A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role...

  2. CVE-2026-72555 Peppermint Lab Peppermint - Broken Access Control

    Published
    HighCVSS 8.1 EPSS 0.37%

    A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.roles_active flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authentica...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.