CyberSecBulletin

Getlago vulnerabilities

We track 1 vulnerability in Getlago products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Getlago vulnerabilities

  • 8.8 High severity

    lago: Authentication Bypass Using an Alternate Path or Channel

    CVE-2026-119420Getlago

    Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session tokens for existing accounts via the acceptInvite mutation without a password check. Attackers can invite a victim's email, accept wit