Vulnerability Description
OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, when JWT authentication is configured using either "authJwtPubKeyPath" (local RSA public key) or "authJwtHmacSecret" (HMAC secret), the configured audience value (authJwtAud) is not enforced during token parsing. As a result, validly signed JWT tokens with an incorrect aud claim are accepted for authentication. This allows authentication using tokens intended for a different audience/service. This issue has been patched in version 3000.11.1.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Olivetin | Olivetin | < 3000.11.1 |
Related Weaknesses (CWE)
References
- https://github.com/OliveTin/OliveTin/commit/e97d8ecbd8d6ba468c418ca496fcd18f7813Patch
- https://github.com/OliveTin/OliveTin/releases/tag/3000.11.1ProductRelease Notes
- https://github.com/OliveTin/OliveTin/security/advisories/GHSA-g962-2j28-3cg9ExploitVendor Advisory
FAQ
What is CVE-2026-30223?
CVE-2026-30223 is a vulnerability with a CVSS score of 8.8 (HIGH). OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, when JWT authentication is configured using either "authJwtPubKeyPath" (local RSA public key) or "a...
How severe is CVE-2026-30223?
CVE-2026-30223 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-30223?
Check the references section above for vendor advisories and patch information. Affected products include: Olivetin Olivetin.