Vulnerability Description
Tuist is a virtual platform team for Swift app devs. Prior to 1.180.10, the forgot password flow allows an unauthenticated attacker to repeatedly trigger password reset emails for a known account without server-side throttling. In self-hosted deployments, this can be abused to send large volumes of unwanted email and consume downstream email delivery resources. This vulnerability is fixed in 1.180.10.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-44679?
CVE-2026-44679 is a documented vulnerability. Tuist is a virtual platform team for Swift app devs. Prior to 1.180.10, the forgot password flow allows an unauthenticated attacker to repeatedly trigger password reset emails for a known account with...
How severe is CVE-2026-44679?
CVSS scoring is not yet available for CVE-2026-44679. Check NVD for updates.
Is there a patch for CVE-2026-44679?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.