Vulnerability Description
Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments. Attackers can access administrative controllers to read user listings, create manager accounts, and register managed systems, gaining control over SSH access to the managed fleet.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/bastillion-io/Bastillion
- https://github.com/bastillion-io/Bastillion/blob/master/src/main/java/loophole/m
- https://github.com/bastillion-io/Bastillion/commit/d759fb686a1a097b1b026e286fd9b
- https://github.com/bastillion-io/Bastillion/issues/669
- https://www.vulncheck.com/advisories/bastillion-authentication-bypass-via-path-p
- https://github.com/bastillion-io/Bastillion/issues/669
FAQ
What is CVE-2026-75627?
CVE-2026-75627 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segm...
How severe is CVE-2026-75627?
CVE-2026-75627 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-75627?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.