Description
Authlib (v1.8.0 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and without requiring a cryptographic key.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Authlib | Authlib | 1.8.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | python-authlib | 1.9.1-1 | — |
| Debian 13 | python-authlib | No fix yet | — |
| Debian 12 | python-authlib | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | python-authlib | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 26.04 LTS | python-authlib | No fix yet | — |
| Ubuntu Pro 24.04 LTS | python-authlib | No fix yet | — |
| Ubuntu Pro 22.04 LTS | python-authlib | No fix yet | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python-Authlib | 1.9.1-1.1 | openSUSE-SU-2026:12390-1 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | open-webui | 0.12.3-r11 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 2 repositories
-
federiconbaez/cortex9-authlib-jws-json-empty-signatures-model ★ 0 · Nov 9, 2026
Offline differential model of Authlib JWS JSON empty-signatures bypass (CVE-2026-96760), educational
-
uziii2208/CVE-2026-96760 ★ 0 · Sep 30, 2026
Authlib 1.7.2: Signature Verification Bypass - General JSON JWS Accepts Unsigned Payload when `signatures` is Empty
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | authlib | < 1.9.0 | 1.9.0 | GHSA-6v38-4h7w-rj9h |
Advisories 1
- openSUSE-SU-2026:12390-1 python313-Authlib-1.9.1-1.1 on GA media SUSE / openSUSE Security Updates · Nov 3, 2026