Description
In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| muety | Wakapi | < 2.17.6 | 2.17.6 |
High · 7.4
CVE-2026-97737
EUVD-2026-86516GHSA-9786-jc2r-f539
In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeov…
Published Sep 25, 2026 · Updated Sep 25, 2026 · Assigned by mitre