Firekylin vulnerabilities
We track 1 vulnerability in Firekylin products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Firekylin vulnerabilities
- 7.1 High severity
Firekylin: Missing Authorization
Firekylin through 2.18.1 contains an improper authorization vulnerability that allows editor-role users to read administrator-only secrets because the admin API base guard permits all GET actions. Editors can query options.js for TOTP secrets, push credentials