CVE-2023-37268

Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a user with SSO enabled an attacker may authenticate as an other user. Any user account which does not have a second factor enabled could be compromised. This issue has been addressed in commit `8173f6512a` and in releases starting with version 0.7.3. Users are advised to upgrade. Users unable to upgrade should require their users to use a second factor in authentication.

• CWE-287

• https://github.com/warp-tech/warpgate/commit/8173f6512ab6183fa5edc5c9a5f3760b8979271ePatch
• https://github.com/warp-tech/warpgate/security/advisories/GHSA-868r-97g5-r9g4Vendor Advisory
• https://github.com/warp-tech/warpgate/commit/8173f6512ab6183fa5edc5c9a5f3760b8979271ePatch
• https://github.com/warp-tech/warpgate/security/advisories/GHSA-868r-97g5-r9g4Vendor Advisory

Published

Jul 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37262CC: Tweaked is a mod for Minecraft which adds programmable c…8.8
• CVE-2023-37263Strapi is the an open-source headless content management sys…2.7
• CVE-2023-37264Tekton Pipelines project provides k8s-style resources for de…4.3
• CVE-2023-37265CasaOS is an open-source Personal Cloud system. Due to a lac…9.8
• CVE-2023-37266CasaOS is an open-source Personal Cloud system. Unauthentica…9.8
• CVE-2023-37267Umbraco is a ASP.NET CMS. Under rare conditions a restart of…9.8
• CVE-2023-37269Winter is a free, open-source content management system (CMS…4.8
• CVE-2023-3727Use after free in WebRTC in Google Chrome prior to 115.0.579…8.8
• CVE-2023-37270Piwigo is open source photo gallery software. Prior to versi…8.8
• CVE-2023-37271RestrictedPython is a tool that helps to define a subset of …9.9
• CVE-2023-37272JS7 is an Open Source Job Scheduler. Users specify file name…5.4
• CVE-2023-37273Auto-GPT is an experimental open-source application showcasi…8.8