Medium · 6.5 CVE-2025-45731 EUVD-2025-22514GHSA-vqm9-87vr-9765

A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other oper…

Published Jul 24, 2025 · Updated Jan 20, 2026 · Assigned by mitre

Description

A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending.

References

https://github.com/Bubka/2FAuth/security/advisories/GHSA-ph6w-q992-7qrx
https://github.com/Bubka/2FAuth/commit/b82a7eb604ddfe994fadce7db3a9e4a201c54a83