HYPR vulnerabilities
We track 11 vulnerabilities in HYPR products across 7 products. 11 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.
Latest HYPR vulnerabilities
- 9.8 Critical severity
Server: Authorization Bypass Through User-Controlled Key
Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2.
- 7.1 High severity
Workforce Access: Improper Link Resolution Before File Access
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1.
- 7.8 High severity
Workforce Access: Improper Link Resolution Before File Access
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.
- 7.8 High severity
Workforce Access: Improper Link Resolution Before File Access
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.
- 7.8 High severity
Workforce Access: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7.
- 8.8 High severity
HYPR Server: Missing Authentication for Critical Functionality
Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affects HYPR Server: before 8.0 (with enabled Legacy APIs)
- 8.8 High severity
Keycloak Authenticator Extension: Improper Authentication
Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extension: before 7.10.2, before 8.0.3.
- 9.8 Critical severity
Workforce Access: Incorrect Permission Assignment for Critical Resource
Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce Access: from 6.12 before 8.1.
- 8.8 High severity
HYPR Server: Authorization Bypass Through User-Controlled Key
Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server ver
- 8.8 High severity
HYPR Server: Direct Request
Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version
- 7.8 High severity
HYPR Windows WFA: Deserialization of Untrusted Data
This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malicious serialized payload.