CVE Feed

    Dashboard / CVE / CVE-2026-73085

    CVE-2026-73085

    Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/TokenManager.js treats JWTs with the refresh token type as bearer access tokens on API and WebSocket resource endpoints such as /api/me instead of restricting them to /auth/refresh, allowing refresh tokens to authenticate as the associated users. This issue is fixed in version 2.36.0.

    Published:Aug 11, 2026
    Last Modified:Aug 13, 2026
    EPS:Aug 11, 2026
    EPSS Score:0.00267
    CVSS Score:5.3

    Affected Products

    Vendor
    Advplyr
    Product
    Audiobookshelf

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2026-71209 (CVSS 7.5) — audiobookshelf's authentication-exemption check (server/routers/Auth.js) matches unauthenticated-allowed GET r…
    CVE-2026-42888 (CVSS 6.9) — Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint a…
    CVE-2026-42887 (CVSS 4.5) — Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.33.0, a stored cross-site scripting (…
    CVE-2026-42886 (CVSS 4.9) — Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/backups/upload en…
    CVE-2026-42885 (CVSS 4.3) — Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/filesystem/pathex…
    CVE-2026-42884 (CVSS 4.3) — Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /api/collections and GE…
    CVE-2026-42883 (CVSS 6.5) — Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /api/libraries/:id/down…
    CVE-2026-27974 (CVSS 4.8) — Audiobookshelf is a self-hosted audiobook and podcast server. A cross-site scripting (XSS) vulnerability exist…
    CVE-2026-27963 (CVSS 4.8) — Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerabilit…
    CVE-2026-27973 (CVSS 4) — Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerabilit…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High