Skip to content
OpenAdvisories

Product · getlago

lago

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-119420

    Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation

    Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session tokens for existing accounts via the acceptInvite mutation without a password check. Attackers can invite a victim's email, accept wi…

    getlago lago