User Caching Service Vulnerabilities in Wakapi Software by Muety

CVE-2026-97737

What is CVE-2026-97737?

Wakapi versions before 2.17.6 contain a flaw in the user caching service, allowing for an unintended lookup context during user verification. This vulnerability can potentially lead to account takeover, where an attacker may gain unauthorized access to user accounts by exploiting this misconfiguration. It is crucial for users and administrators of Wakapi to upgrade to the latest version to mitigate this vulnerability and ensure the security of their user information.

References