CVE-2026-117564

nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret

buqiyuan nest-admin

Open in Threatline Record JSON

CVSS

9.3Critical

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet

Fixed in1.0.1Fixed versionCVE List

Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

1.0.1nest-adminCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

@stemshop.bsky.social: 🚨 CVE-2026-117564 — CVSS 9.3 CRITICAL nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attacke... 🔎 https://stemshop.top/cve/CVE-Bluesky: CVE posts, 27 Oct 2026

Description

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access.

Text from CVE List

Affected versions 1

nest-adminaffected: all versions before 1.0.1CVE List