Priority MEDIUM 57
Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body.
Peppermint-Lab
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Peppermint-Lab records in CISA KEVNo Peppermint-Lab vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-58599 CVE-2026-85391 · GHSA-mjr9-fw4p-963x
Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml
Priority MEDIUM 49
Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account.
TI-2026-50820 CVE-2026-72561 · GHSA-68fr-jcrp-77h3
Peppermint Lab Peppermint - Broken Access Control
Priority MEDIUM 40
A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configura…
TI-2026-50814 CVE-2026-72555 · GHSA-jv42-7r5q-7p5r
Peppermint Lab Peppermint - Broken Access Control
Priority LOW 37
A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.roles_active flag defaults to false, causing all permission checks on ticket, client, and user handlers…
TI-2026-58600 CVE-2026-85392 · GHSA-r5f6-fc86-75rh
Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint
Priority LOW 24
Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint that allows authenticated attackers to delete sessions for any user by supplying arbitrary user IDs…