Authentication Bypass in sysPass Affects Unauthenticated Users
CVE-2026-129110

9.3CRITICAL

Key Information:

Vendor

Nuxsmin

Status
Syspass
Vendor
CVE Published:
13 November 2026

What is CVE-2026-129110?

The sysPass application, versions 3.0.1 through 3.2.11, features a critical authentication bypass vulnerability. This flaw allows unauthorized attackers to exploit the install/install handler, permitting them to bypass the necessary checks for installed status. By sending specific POST requests, attackers can overwrite sensitive configuration files, redirect the application to a malicious database, create unauthorized admin accounts, and execute harmful commands using serialized PublicLink gadgets. This vulnerability poses a significant risk to user data and application integrity, necessitating immediate attention and remediation.

Affected Version(s)

sysPass 3.0.1 <= 3.2.11

References

https://github.com/nuxsmin/sysPass/blob/3.2.11/app/module...
technical-description
https://github.com/OpusProjects/sysPass/pull/360
patchissue-tracking
https://github.com/nuxsmin/sysPass/issues/1954
issue-tracking

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

r3verii (Martino Spagnuolo)
Marcos Azevedo (psylinux)
.