CVE-2026-75773

Name of the Vulnerable Software and Affected Versions karakeep-app karakeep versions prior to 0.33.0

Description An issue exists in the Login Endpoint within the authorize() function of the apps/web/server/auth.ts file. This flaw allows for improper restriction of excessive authentication attempts, which could be exploited remotely. The attack is characterized by high complexity and is difficult to execute.

Recommendations Upgrade to version 0.33.0. As a temporary mitigation, restrict access to the authorize() function in the Login Endpoint to minimize the risk of exploitation.