CVE-2026-51584

Name of the Vulnerable Software and Affected Versions usememos version 0.27.1

Description A remote attacker can achieve account takeover through the ssoCredentials branch of the SignIn handler in the endpoint '/api/v1/auth service.go'. This occurs because the SSO identity is matched using an identifier controllable by the attacker, without being bound to the Identity Provider's (IdP) stable subject claim, which is a unique and unchanging identifier for a user within the IdP.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.