CVE-2026-25519

OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single sign on with SAML via an external IDP. For users synced to OpenSlides via an external IDP, there is an incorrect access control regarding the local login of these users. Users can successfully login using the local login form and the OpenSlides username of a SAML user and a trivial password. This password is valid for all SAML users. This issue has been patched in version 4.2.29.

• CWE-284

• https://github.com/OpenSlides/OpenSlides/releases/tag/4.2.29Product, Release Notes
• https://github.com/OpenSlides/OpenSlides/security/advisories/GHSA-vv4h-8wfc-pf8cPatch, Vendor Advisory
• https://github.com/OpenSlides/openslides-auth-service/commit/70c1aa9f5e1db59ec120ecce98d1c1169350a4eePatch
• https://github.com/OpenSlides/openslides-auth-service/pull/889Issue Tracking

Published

Feb 4, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25512Group-Office is an enterprise customer relationship manageme…8.8
• CVE-2026-25513FacturaScripts is open-source enterprise resource planning a…8.8
• CVE-2026-25514FacturaScripts is open-source enterprise resource planning a…8.8
• CVE-2026-25516NiceGUI is a Python-based UI framework. The ui.markdown() co…6.1
• CVE-2026-25517Wagtail is an open source content management system built on…2.7
• CVE-2026-25518cert-manager adds certificates and certificate issuers as re…5.9
• CVE-2026-2552A vulnerability was identified in ZenTao up to 21.7.8. Affec…5.5
• CVE-2026-25520SandboxJS is a JavaScript sandboxing library. Prior to 0.8.2…10
• CVE-2026-25521Locutus brings stdlibs of other programming languages to Jav…8.8
• CVE-2026-25522Craft Commerce is an ecommerce platform for Craft CMS. In ve…4.8
• CVE-2026-25523Magento-lts is a long-term support alternative to Magento Co…5.3
• CVE-2026-25524Magento Long Term Support (LTS) is an unofficial, community-…8.1