CVE-2026-82468

Name of the Vulnerable Software and Affected Versions Rodauth versions prior to 2.47.0

Description An issue exists in the JSON request content type validation that allows a cross-site request forgery (CSRF) protection bypass. CSRF is a type of attack that tricks a victim into submitting a malicious request. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass token validation, potentially forcing victims to authenticate to accounts controlled by the attacker.

Recommendations Update to version 2.47.0 or later.