CVE-2025-14261

Publication date

2025-12-08 18:12:46

Family

JFROG

State

PUBLISHED

Description

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.