CVE-2026-32301

Centrifugo is an open-source scalable real-time messaging server. Prior to 6.7.0, Centrifugo is vulnerable to Server-Side Request Forgery (SSRF) when configured with a dynamic JWKS endpoint URL using template variables (e.g. {{tenant}}). An unauthenticated attacker can craft a JWT with a malicious iss or aud claim value that gets interpolated into the JWKS fetch URL before the token signature is verified, causing Centrifugo to make an outbound HTTP request to an attacker-controlled destination. This vulnerability is fixed in 6.7.0.

• CWE-918

• https://github.com/centrifugal/centrifugo/security/advisories/GHSA-j77h-rr39-c552Exploit, Mitigation, Vendor Advisory

Published

Mar 13, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32296Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration en…8.8
• CVE-2026-32297The Angeet ES3 KVM allows a remote, unauthenticated attacker…9.3
• CVE-2026-32298The Angeet ES3 KVM does not properly sanitize user-supplied …9.1
• CVE-2026-32299Connect-CMS is a content management system. In versions on t…7.5
• CVE-2026-3230Missing required cryptographic step in the TLS 1.3 client He…2.7
• CVE-2026-32300Connect-CMS is a content management system. In versions on t…8.1
• CVE-2026-32302OpenClaw is a personal AI assistant. Prior to 2026.3.11, bro…8.1
• CVE-2026-32303Cryptomator encrypts data being stored on cloud infrastructu…5.9
• CVE-2026-32304Locutus brings stdlibs of other programming languages to Jav…9.8
• CVE-2026-32305Traefik is an HTTP reverse proxy and load balancer. Versions…5.3
• CVE-2026-32306OneUptime is a solution for monitoring and managing online s…9.9
• CVE-2026-32308OneUptime is a solution for monitoring and managing online s…7.6