CVE-2026-126768

Name of the Vulnerable Software and Affected Versions OpsTree REMS versions prior to 1.0.1

Description An authentication bypass allows unauthenticated attackers to obtain valid JSON Web Tokens (JWTs) by manipulating a client-controlled field. By sending a POST request to the '/api/v1/user/login/' endpoint for the admin account with an invalid password and setting the is local auth variable to true, an attacker can gain SuperUser administrative access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/api/v1/user/login/' endpoint to minimize the risk of exploitation.