Authentication Bypass in Casdoor Impacting Token Validity

CVE-2026-9097

What is CVE-2026-9097?

Casdoor versions 2.362.0 and earlier contain a vulnerability that compromises the security of token exchange. The GetTokenExchangeToken() function implements JWT signature validation and claim parsing, yet it fails to perform a crucial check against the Token table to ascertain whether the corresponding token is still valid or has been revoked. This oversight allows active sessions to remain unregulated, making it impossible for administrators to terminate sessions or revoke tokens that may have been compromised, thus posing a significant risk to system integrity.

References