LitmusChaos vulnerabilities
We track 4 vulnerabilities in LitmusChaos products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 8, 2025.
Latest LitmusChaos vulnerabilities
- 7.1 High severity
litmus: Insufficient Entropy
The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.
- 8.8 High severity
Litmus: Incorrect Privilege Assignment
A vulnerability was found in LitmusChaos Litmus up to 3.19.0 and classified as critical. This issue affects some unknown processing of the component LocalStorage Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The ex
- 9.9 Critical severity
Litmus: Incorrect Privilege Assignment
A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0. This affects an unknown part of the file /auth/login. The manipulation of the argument projectID leads to improper access controls. It is possible to initiate the
- 7.8 High severity
Litmus: Improper Authorization
A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by this issue is some unknown functionality of the component LocalStorage Handler. The manipulation of the argument projectID leads to authorizati