CVE-2026-9371

Name of the Vulnerable Software and Affected Versions ItzCrazyKns Vane versions prior to 1.12.2

Description An issue exists in the API component within the route.ts file where unknown functionality allows for missing authentication. This flaw enables a remote attacker to bypass authentication mechanisms, although the attack complexity is high and exploitation is considered difficult.

Recommendations Update to version 1.12.2 or later. As a temporary mitigation, restrict access to the API component's route.ts file to minimize the risk of unauthorized access.