Skip to content
OpenAdvisories

Product · SciSharp

BotSharp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-108860

    BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key

    BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json. Attackers can sign tokens with the committed HMAC secret an…

    SciSharp BotSharp