Bastillion-io vulnerabilities
We track 1 vulnerability in Bastillion-io products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 18, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Bastillion-io vulnerabilities
- 9.8 Critical severity
Bastillion: Authentication Bypass Using an Alternate Path or Channel
Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments. Attackers can access administrative controllers to rea