CVE-2026-75774

Name of the Vulnerable Software and Affected Versions karakeep-app karakeep versions prior to 0.32.0

Description An issue in the OAuth Sign-In component, specifically within a function in the apps/web/server/auth.ts file, allows for improper authentication. This flaw can be exploited remotely, although the attack complexity is high and exploitability is considered difficult.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.