Authorization Bypass in Mythic by Its-a-Feature Affects Multiple REST Endpoints

CVE-2026-57952

What is CVE-2026-57952?

Mythic versions prior to 3.4.0.60 are vulnerable to an authorization bypass issue that affects specific REST endpoints. The flaw allows an operator in one operation to exploit unverified payload UUIDs from a different operation, granting unauthorized access to the C2 profile configuration of that operation. This includes sensitive information such as encryption keys and callback parameters. Ensuring proper authentication and authorization checks for these endpoints is critical to prevent unauthorized data exposure.

References