Skip to content
OpenAdvisories

Vendor

fastapiadmin

2 known vulnerabilities.

Products

FastapiAdmin 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-111642

    FastapiAdmin through 3.0 Hard-Coded JWT Secret Privilege Escalation

    FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoi…

    fastapiadmin FastapiAdmin