CVE-2026-105130

Name of the Vulnerable Software and Affected Versions LaraDashboard versions 1.4.0 through 1.4.7

Description A race condition exists in the RegisterController::register function. This allows unauthenticated attackers to bypass the daily registration limit per IP address by sending multiple concurrent registration requests. Because these requests can all pass the RegistrationGuardService::hasExceededIpLimit check before the recordRegistration function executes, attackers can create accounts in bulk, effectively defeating anti-automation controls.

Recommendations Update LaraDashboard to version 1.4.8.