Skip to content

Product

scitokens-cpp vulnerabilities

2 published CVES affecting scitokens-cpp, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest scitokens-cpp CVEs

Newest publication first

  1. CVE-2026-32725 SciTokens C++: Relative Path Traversal Vulnerability

    Published
    HighCVSS 8.3 EPSS 0.85%

    SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization...

  2. CVE-2026-32726 SciTokens C++: Sibling-Path Authorization Bypass

    Published
    HighCVSS 8.1 EPSS 0.28%

    SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass in path-based scope validation. The enforcer used a simple string-prefix comparison when checking whether a requested...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.