Skip to content
OpenAdvisories

Vendor

getlago

2 known vulnerabilities.

Products

lago 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-119420

    Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation

    Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session tokens for existing accounts via the acceptInvite mutation without a password check. Attackers can invite a victim's email, accept wi…

    getlago lago