Security Advisory

CVE-2026-78062

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-23 04:15:10

Last updated 2026-08-23 04:15:10

Assigner VulDB

CVSS score 7.5

State PUBLISHED

Description

A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of the file lib/config.ts of the component JWT Secret Handler. The manipulation of the argument BETTER_AUTH_SECRET leads to hard-coded credentials. The attack can be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.

← Browse all CVEs View on cve.org ↗