Read the docs
TI-2026-84835 Aliases CVE-2026-121535GHSA-96v4-jjm6-m9vg

MiroTalk P2P lets attackers make excessive password check attempts

Priority LOW 29CWE-307Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-307.

Summary

miroslavpejic85 MiroTalk P2P versions 2.0.0 up to 2.0.87 are affected. The checkPassword function in the Room Action Handler does not restrict excessive authentication attempts (CWE-307), so a remote attacker without privileges can submit repeated password guesses. The attack is highly complex, and a public exploit is linked in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Description from the CNA

A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the function checkPassword of the file app/src/server.js of the component Room Action Handler. The manipulation results in improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. The exploit has been made public and could be used. Upgrading to version 2.1.38 is able to resolve this issue. The patch is identified as 55bec1d05f931d2e43633d6d0b7274f79ec719dd. Upgrading the affected component is advised.

Why it matters now

EPSS 0.00521 44th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed MiroTalk P2P (miroslavpejic85): 2.1.38

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
miroslavpejic85MiroTalk P2P2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; 2.0.6; 2.0.7; 2.0.8; 2.0.9; 2.0.10; 2.0.11; 2.0.12; 2.0.13; 2.0.14; 2.0.15; 2.0.16; 2.0.17; 2.0.18; 2.0.19; 2.0.20; 2.0.21; 2.0.22; 2.0.23; 2.0.24; 2.0.25; 2.0.26; 2.0.27; 2.0.28; 2.0.29; 2.0.30; 2.0.31; 2.0.32; 2.0.33; 2.0.34; 2.0.35; 2.0.36; 2.0.37; 2.0.38; 2.0.39; 2.0.40; 2.0.41; 2.0.42; 2.0.43; 2.0.44; 2.0.45; 2.0.46; 2.0.47; 2.0.48; 2.0.49; 2.0.50; 2.0.51; 2.0.52; 2.0.53; 2.0.54; 2.0.55; 2.0.56; 2.0.57; 2.0.58; 2.0.59; 2.0.60; 2.0.61; 2.0.62; 2.0.63; 2.0.64; 2.0.65; 2.0.66; 2.0.67; 2.0.68; 2.0.69; 2.0.70; 2.0.71; 2.0.72; 2.0.73; 2.0.74; 2.0.75; 2.0.76; 2.0.77; 2.0.78; 2.0.79; 2.0.80; 2.0.81; 2.0.82; 2.0.83; 2.0.84; 2.0.85; 2.0.86; 2.0.872.1.38Patch availableCNA
  • MiroTalk P2P Vendormiroslavpejic85 Affected 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; 2.0.6; 2.0.7; 2.0.8; 2.0.9; 2.0.10; 2.0.11; 2.0.12; 2.0.13; 2.0.14; 2.0.15; 2.0.16; 2.0.17; 2.0.18; 2.0.19; 2.0.20; 2.0.21; 2.0.22; 2.0.23; 2.0.24; 2.0.25; 2.0.26; 2.0.27; 2.0.28; 2.0.29; 2.0.30; 2.0.31; 2.0.32; 2.0.33; 2.0.34; 2.0.35; 2.0.36; 2.0.37; 2.0.38; 2.0.39; 2.0.40; 2.0.41; 2.0.42; 2.0.43; 2.0.44; 2.0.45; 2.0.46; 2.0.47; 2.0.48; 2.0.49; 2.0.50; 2.0.51; 2.0.52; 2.0.53; 2.0.54; 2.0.55; 2.0.56; 2.0.57; 2.0.58; 2.0.59; 2.0.60; 2.0.61; 2.0.62; 2.0.63; 2.0.64; 2.0.65; 2.0.66; 2.0.67; 2.0.68; 2.0.69; 2.0.70; 2.0.71; 2.0.72; 2.0.73; 2.0.74; 2.0.75; 2.0.76; 2.0.77; 2.0.78; 2.0.79; 2.0.80; 2.0.81; 2.0.82; 2.0.83; 2.0.84; 2.0.85; 2.0.86; 2.0.87 Fixed in 2.1.38 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:miroslavpejic85:mirotalk_p2p:*:*:*:*:*:*:*:*——miroslavpejic85
  • cpe:2.3:a:miroslavpejic85:mirotalk_p2p:*:*:*:*:*:*:*:* Versions — — ·miroslavpejic85

Remediation

Upgrade MiroTalk P2P to version 2.1.38, which contains the fix in commit 55bec1d05f931d2e43633d6d0b7274f79ec719dd.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

  • Fix · CNA MiroTalk P2P (miroslavpejic85) Fixed in 2.1.38

Timeline

  1. 2026-11-03 Threatist record created from CVE-2026-121535
  2. 2026-11-04 Alias added: GHSA-96v4-jjm6-m9vg
  3. 2026-11-05 Priority changed: MEDIUM → LOW

References

Exploit 1

Patch 1

Other 2

  • TI-2026-84844 Improper access control in MiroTalk P2P Socket IO handler CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences