GoAdminGroup vulnerabilities
We track 1 vulnerability in GoAdminGroup products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest GoAdminGroup vulnerabilities
- 8.1 High severity
go-admin: Incorrect Authorization
GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated users to bypass permission checks by appending a query parameter. Attackers can append a query string containing the admin prefix followed by /