CVE-2026-121543
smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authenticated user to call admin console APIs because unlisted paths are permitted by default. Attackers can call /admin/user-role/save to assign themselves the administrator role, reset passwords, and manage users, roles, and applications across integrated systems.
| CWE | CWE-863 |
| Vendor | a466350665 |
| Product | smart-sso |
| Published | Nov 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for a466350665 smart-sso
Be the first to know when new high vulnerabilities affecting a466350665 smart-sso are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
a466350665 / smart-sso
0 ≤ 2.0.1
References
github.com: https://github.com/a466350665/smart-sso/issues/79 github.com: https://github.com/a466350665/smart-sso github.com: https://github.com/a466350665/smart-sso/commit/9bccabaa5ec5 github.com: https://github.com/a466350665/smart-sso/blob/91d2dfef8973d308fa1b762e4c86dfbcbe9793ff/smart-sso-starter/smart-sso-starter-client/src/main/java/openjoe/smart/sso/client/filter/PermissionFilter.java#L38-L47 github.com: https://github.com/a466350665/smart-sso/blob/91d2dfef8973d308fa1b762e4c86dfbcbe9793ff/smart-sso-server/src/main/java/openjoe/smart/sso/server/controller/admin/UserRoleController.java github.com: https://github.com/a466350665/smart-sso/commit/a74a791bea7fc7b06ce95f52ce5805d8d7886d48 vulncheck.com: https://www.vulncheck.com/advisories/smart-sso-through-2.0.1-incorrect-authorization-in-permissionfilter-enables-admin-escalation
Credits
George Chen