Skip to content
OpenAdvisories

Vendor

Rabithua

2 known vulnerabilities.

Products

Rote 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-126803

    Rote through 2.6.0 Privilege Escalation via Admin Settings API JWT Secret Exposure

    Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain super_admin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the sec…

    Rabithua Rote
  • High 8.8
    CVE-2026-126801

    Rote 1.2.0 through 2.6.0 Account Takeover via OAuth Account Merge Endpoint

    Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authenticated users to merge any OAuth-bound account into their own. Attackers can submit a public existingUserId and GitHub or Apple user ID to take over n…

    Rabithua Rote