PT-2026-146402
CVE-2026-127286
·
Published
2026-11-13
·
Updated
2026-11-13
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Zackriya-Solutions Meetily versions prior to 0.4.2
Description
An issue exists in the
backend/app/main.py file where a manipulation of an unknown function allows remote attackers to bypass authentication. This occurs because a legacy backend containing the vulnerable code remains present in the main branch, despite the transition to a unified application using the Tauri framework.Recommendations
Update Zackriya-Solutions Meetily to version 0.4.2 or later.
As a temporary mitigation, restrict access to the
backend/app/main.py file or the associated legacy backend services. Found an issue in the description? Have something to add? Feel free to write us 👾