CyberSecBulletin

LaciSynchroni vulnerabilities

We track 1 vulnerability in LaciSynchroni products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2026.

1vulnerabilities
1critical
0high
0exploited
9.2average CVSS score

Latest LaciSynchroni vulnerabilities

  • 9.2 Critical severity

    server: Improper Authentication

    CVE-2026-54047LaciSynchroni

    Laci Synchroni is a decentralized mod and appearance sync server and plugin for Dalamud. Versions of the backend prior to 1.2.3 have an improper authentication vulnerability in the application's OAuth2 login flow. The application relies on client-side state by