Vulnerability Description
Databasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the authorization decision without re-checking token validity during acceptance. Attackers with a leaked or forwarded invitation link can load the page while pending, then accept the invitation after the legitimate user has already accepted it to overwrite the account password and gain authenticated access to managed database credentials and secrets.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/David-Crty/databasement
- https://github.com/David-Crty/databasement/blob/v1.7.13/app/Livewire/Auth/Accept
- https://github.com/David-Crty/databasement/blob/v1.7.13/app/Livewire/Auth/Accept
- https://github.com/David-Crty/databasement/commit/128efeaf6bc9ad4a63940f4c3030a5
- https://github.com/David-Crty/databasement/releases/tag/v1.7.14
- https://www.vulncheck.com/advisories/databasement-before-1.7.14-authorization-by
FAQ
What is CVE-2026-95654?
CVE-2026-95654 is a vulnerability with a CVSS score of 7.4 (HIGH). Databasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the authorization decision without re-checking token validity during acceptance. Attackers with a le...
How severe is CVE-2026-95654?
CVE-2026-95654 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-95654?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.