Vendor

fastapiadmin

2 known vulnerabilities.

Products

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2026-111641

FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints

FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-login/users, mint a supe…

fastapiadmin FastapiAdmin

Oct 16, 2026