CVE-2026-121535

Name of the Vulnerable Software and Affected Versions miroslavpejic85 MiroTalk P2P versions prior to 2.1.38

Description The Room Action Handler component contains an issue within the checkPassword() function located in the app/src/server.js file. This flaw allows for improper restriction of excessive authentication attempts, which can be exploited remotely. The attack is characterized as highly complex and difficult to execute.

Recommendations Update to version 2.1.38. As a temporary mitigation, restrict access to the checkPassword() function to minimize the risk of exploitation.