Missing Authentication in RansomLook's Crypto Group Creation Endpoint
CVE-2026-78369

8.8HIGH

Key Information:

Vendor

Ransomlook

Status
Ransomlook
Vendor
CVE Published:
24 August 2026

What is CVE-2026-78369?

RansomLook features a vulnerability in its /admin/crypto/group/new endpoint where a lack of proper authentication permits unauthorized users to create new crypto group entries. This flaw can be exploited by attackers who can access the RansomLook web interface, potentially allowing them to modify crucial administrative data without valid login credentials. When exploited, this could lead to the introduction of fraudulent data which may compromise the integrity of RansomLook's operations. To mitigate this risk, it is essential to implement the flask_login.login_required decorator for the endpoint, thereby restricting access to only authenticated users.

Affected Version(s)

ransomlook 0 <= 2.0.0

References

https://github.com/RansomLook/RansomLook/commit/fc25bc4f3...
patch

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jeroen Pinoy
Fafner [_KeyZee_]
.