Hi Josip! On Sat, Oct 31, 2026 at 10:15:05PM +0100, Josip Stjepanovi?? wrote: > Hello everyone, > > Looking at HAProxys 3.4.7 source code a security vulnerability with CVSS > score 7.4 was found: > CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N = 7.4 (High) > > Rationale: > - AV:Network ??? exploitable over HTTP > - AC:High ??? attacker must know/guess the pubkey file path (not directly > observable, but often predictable) > - PR:None ??? no authentication needed to send the forged token > - UI:None ??? no user interaction required > - S:Unchanged ??? stays within HAProxy's authorization scope > - C:High / I:High ??? full authentication bypass, arbitrary claim forgery > - A:None ??? no availability impact > > Do I open an Issue on github or do I send the PoC with findings to someone > directly? > Kind regards
Please send the report to [email protected]. Thank you! Olivier
