PT-2026-137643

CVE-2026-123196

Published

2026-11-05

Updated

2026-11-05

Description by

CVSS 4.0

8.6

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Authorizer versions prior to 2.4.2

Description An issue exists where unauthenticated attackers can control the hosts of emailed links. This is achieved by supplying x-authorizer-url gRPC metadata to the gRPC port or using a Grpc-Metadata-X-Authorizer-Url header via the REST gateway. This allows attackers to capture reset or magic-link tokens, potentially leading to account takeover.

Recommendations Update Authorizer to version 2.4.2 or later.

Exploitability

Exploit

Fix

Researchers

Lakhan Samani

Theodoros Lampropoulos

Vendors

Affected products

Weakness enumeration

CWE-640: Weak Password Recovery Mechanism for Forgotten Password

Related identifiers