CVE-2026-49848

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.11.1

Description In the mod verto module, the check auth userauth branch writes request-supplied userVariables into the connection state before the supplied password is compared. Because these writes are append-only and the connection remains open after a failed password comparison, values provided during unsuccessful login attempts persist on the same WebSocket. These variables are then carried over into a subsequent successful login on that same connection.

Recommendations Update to version 1.11.1.