Skip to content
Critical Authentication Bypass Vulnerability in Gorse Exposed

Critical Authentication Bypass Vulnerability in Gorse Exposed

First seen 30 Jun 2026, 11:55 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 1, 2026 at 11:29 UTC
  • •CVE-2026-56782 is a critical authentication bypass vulnerability in Gorse.
  • •Attackers can exfiltrate sensitive data or overwrite databases due to default configurations.
  • •A proof-of-concept exploit was released, increasing the urgency for updates.

Gorse versions prior to 0.5.10 contain a critical authentication bypass vulnerability (CVE-2026-56782) in the /api/dump and /api/restore endpoints. This flaw allows unauthenticated attackers to access sensitive data when the admin_api_key is left empty, which is the default setting. Attackers can exfiltrate the entire database, including personally identifiable information, or overwrite the dataset entirely. A proof-of-concept exploit was released on GitHub on June 30, 2026, raising concerns about potential exploitation. The CVSS base score for this vulnerability is 9.8, indicating a critical risk level. Users are advised to upgrade to version 0.5.10 or later and to set a strong admin_api_key to mitigate the risk. Currently, there is no evidence of active exploitation, but the situation remains urgent.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 108d ago How this analysis works

Timeline

2026-06-29
CVE-2026-56782 published
Gorse vulnerability disclosed, allowing unauthenticated access to sensitive data with default settings.
Feedly
2026-06-30
First public PoC released
A proof-of-concept exploit for CVE-2026-56782 was made available on GitHub, raising exploitation concerns.
cve.akaoma.com

More articles in this cluster (4)

Following this threat?

Track CVE-2026-56782 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 4