Vulnerability Description
SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in tokens. The library normalizes the scope path from the token before authorization and collapses ".." path components instead of rejecting them. As a result, an attacker can use parent-directory traversal in the scope claim to broaden the effective authorization beyond the intended directory. This issue has been patched in version 1.4.1.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Scitokens | Scitokens Cpp Library | < 1.4.1 |
Related Weaknesses (CWE)
References
- https://github.com/scitokens/scitokens-cpp/commit/7951ed809967d88c00c20de414b1ffPatch
- https://github.com/scitokens/scitokens-cpp/security/advisories/GHSA-rqcx-mc9w-pjExploitVendor Advisory
FAQ
What is CVE-2026-32725?
CVE-2026-32725 is a vulnerability with a CVSS score of 8.3 (HIGH). SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an authorization bypass when processing path-based scopes in t...
How severe is CVE-2026-32725?
CVE-2026-32725 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-32725?
Check the references section above for vendor advisories and patch information. Affected products include: Scitokens Scitokens Cpp Library.