TI-2026-81168 CVE-2026-117564 · GHSA-mmvv-wwj3-vgj8
Authentication bypass in nest-admin via hardcoded JWT secret
Priority MEDIUM 49
nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production.