laravel Vulnerabilities and Affected Products
Vulnerabilities associated with passport.
Products
Clear product- framework5 vulnerabilities
- Laravel Framework4 vulnerabilities
- livewire3 vulnerabilities
- reverb2 vulnerabilities
- Ignition1 vulnerability
- Laravel Valet1 vulnerability
- passport1 vulnerability
- pulse1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-39976HIGH | Laravel Passport's TokenGuard Authenticates Unrelated User for Client Credentials TokensLaravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for client_credentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier (since there's no user). The token guard then passes this value to retrieveById() without validating it's actually a user identifier, potentially resolving an unrelated real user. Any machine-to-machine token can inadvertently authenticate as an actual user. This … CWE-287Apr 9, 2026 | CVSS7.1v3.1 | EPSS0.289% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |