CyberSecBulletin

Identrail vulnerabilities

We track 1 vulnerability in Identrail products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.

1vulnerabilities
0critical
1high
0exploited
8.5average CVSS score

Latest Identrail vulnerabilities

  • 8.5 High severity

    identrail: Authorization Bypass Through User-Controlled Key

    CVE-2026-59185Identrail

    identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `POST /v1/workspaces/:workspace_id/projects/:project_id/github/connect/complete` endpoint in `internal/api/router.go` accepts `installation_i