Authentication Bypass in Readest E-book Reader
CVE-2026-57562

6.5MEDIUM

Key Information:

Vendor

Readest

Status
Readest
Vendor
CVE Published:
4 November 2026

What is CVE-2026-57562?

A vulnerability in the Readest E-book Reader prior to version 0.11.10 allows any authenticated user to upgrade to a paid plan without proper payment validation. This occurs because the app accepts a client-controlled sessionId during a session check, enabling free users to exploit this flaw by replaying their Checkout Session identifiers. Consequently, any user with an active paid session identifier can gain unauthorized access to additional accounts without payment verification. Updated to version 0.11.10, this issue has been addressed by ensuring the integrity of session metadata during subscription management.

Affected Version(s)

readest < 0.11.10

References

https://github.com/readest/readest/security/advisories/GH...
x_refsource_CONFIRM
https://github.com/readest/readest/pull/4638
x_refsource_MISC
https://github.com/readest/readest/commit/495783d04516d05...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.