lago vulnerabilities

1 known vulnerability in lago from Getlago. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  lago: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-119420Oct 30, 2026Getlago

  Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session tokens for existing accounts via the acceptInvite mutation without a password check. Attackers can invite a victim's email, accept wit