CVE-2022-51026
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows…
- Risk score
- 74/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 0.6%
- Published
- 22 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Bytebase versions 0.12.0 to 1.0.1 contain an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. Attackers can impersonate existing users or create new members.
- Affected
- {'product': 'Bytebase', 'package': None, 'version': '0.12.0 to 1.0.1'}
- Fix
- Upgrade to version 1.0.1 or later
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
- https://github.com/bytebase/bytebase
- https://github.com/bytebase/bytebase/blob/1.0.0/server/auth.go#L79-L93
- https://github.com/bytebase/bytebase/commit/d69e682243b25b51dd52912a26e2f259b5f3db2d
- https://github.com/bytebase/bytebase/pull/834
- https://github.com/bytebase/bytebase/releases/tag/1.0.1
- https://github.com/bytebase/bytebase/security/advisories/GHSA-5r3p-6rj5-7937
- https://www.vulncheck.com/advisories/bytebase-0.12.0-before-1.0.1-authentication-bypass-via-gitlab-self-hosted-login
Original description
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB_SELF_HOST endpoint. Attackers can set instanceUrl to a server they control that returns an active user with a chosen email. Bytebase then issues session tokens for that principal, letting attackers impersonate existing users including the Owner or create new members.
Last activity 22 Oct 2026. Patch Forecast updates every hour.