PT-2026-80362
Published
2026-08-18
·
Updated
2026-08-18
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method in github.com/pocket-id/pocket-id/backend
Exploitability
Exploit
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾