CVE-2026-126803

HIGH 7.2

Rote through 2.6.0 Privilege Escalation via Admin Settings API JWT Secret Exposure

CVSS Score

7.2

EPSS Score

0.0%

EPSS Percentile

0th

Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain super_admin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group and forge HS256 tokens for the super administrator to change user roles and escalate their own account.

CWE	CWE-269
Vendor	rabithua
Product	rote
Published	Nov 11, 2026

Stay Ahead of the Next One

Get instant alerts for rabithua rote

Be the first to know when new high vulnerabilities affecting rabithua rote are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Rabithua / Rote

0 ≤ 2.6.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Rabithua/Rote/pull/420 github.com: https://github.com/Rabithua/Rote/commit/865d69fceb9c1f1a0d30923fae7cef072a38b22b github.com: https://github.com/Rabithua/Rote/blob/v2.6.0/server/route/v2/admin.ts#L86-L146 vul.yulun.ac.cn: https://vul.yulun.ac.cn/20261104/rote/ vulncheck.com: https://www.vulncheck.com/advisories/rote-through-2.6.0-privilege-escalation-via-admin-settings-api-jwt-secret-exposure

Credits

Wu Yulun