CVE-2026-85392

    Dashboard / Vulnerabilities / CVE-2026-85392

    CVE-2026-85392

    Published: 3 Sept 2026Last Modified: 11 Sept 2026

    Summary: Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint

    Details: Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint that allows authenticated attackers to delete sessions for any user by supplying arbitrary user IDs. Attackers can forcibly log out any user including administrators by calling the logout handler with another user's ID, since the endpoint performs no authorization checks to verify the caller owns the target account.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85392.json, https://nvd.nist.gov/vuln/detail/CVE-2026-85392, https://www.vulncheck.com/advisories/peppermint-through-0.5.5-authorization-bypass-on-the-user-logout-endpoint, https://github.com/Peppermint-Lab/peppermint/issues/529, https://github.com/Peppermint-Lab/peppermint, https://github.com/Peppermint-Lab/peppermint/blob/0.5.5/apps/api/src/controllers/auth.ts

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -71ae71ba78e1d605bc4b178342710cc7f1dc3714

    Affected versions

    0.5.4.2
    0.5.3.2
    0.5.3.1
    0.5.2
    0.5.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-85392 | CVE-DB