Authentication Bypass in Stigmem by Eidetic Labs

CVE-2026-76243

What is CVE-2026-76243?

Versions of Stigmem prior to 0.9.0a2 are susceptible to an authentication bypass vulnerability that enables unauthenticated users to gain access. When authentication is disabled, particularly in non-loopback deployments, attackers can exploit this flaw to perform read, write, and federation actions using anonymous identities. This becomes especially critical when nodes are inadvertently exposed outside of local development environments, allowing potential misuse in production settings.

References