Authentication Bypass Vulnerability in Ikaros Product by Ikaros Dev

CVE-2026-110097

What is CVE-2026-110097?

Ikaros versions 1.2.0 to 1.2.5 contain a serious authentication bypass flaw, allowing attackers with valid credentials to evade Two-Factor Authentication (2FA) via the reuse of a temporary token. This vulnerability enables unauthorized access by exploiting the JWT token generated during login, which can be refreshed or utilized through HTTP Basic authentication to gain complete control of user accounts, potentially including administrative privileges.

References