Vulnerability Description
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after password changes because the LoginLink signature covers only the user id, not the password hash. Attackers who intercept or cache a password reset link can use it up to 2 additional times within a 1-hour window to log in as the user even after the legitimate user has changed their password.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/kimai/kimai/security/advisories/GHSA-m492-gv72-xvxj
- https://www.vulncheck.com/advisories/kimai-before-2.58.0-authentication-bypass-v
- https://github.com/kimai/kimai/security/advisories/GHSA-m492-gv72-xvxj
FAQ
What is CVE-2026-80196?
CVE-2026-80196 is a vulnerability with a CVSS score of 7.5 (HIGH). Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after password changes because the LoginLink signature covers only the user id, not the pass...
How severe is CVE-2026-80196?
CVE-2026-80196 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-80196?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.