CVE-2026-42176

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.67.0, Scoold allows the admins configuration value to be modified through /api/config/set/admins with a forged Bearer token that is accepted as an admin API token. Once that setting is changed, the target email address is written to the application configuration file. The change does not become active immediately in the current process, because the ADMINS set is loaded once at startup. After a Scoold restart, though, the selected user is recognized as an administrator and gains access to the admin panel. This issue gives an attacker a reliable persistence path: write their own email into scoold.admins, wait for a restart or trigger one operationally, and the account comes back as admin. This issue has been patched in version 1.67.0.

• CWE-306

• https://github.com/Erudika/scoold/releases/tag/1.67.0
• https://github.com/Erudika/scoold/security/advisories/GHSA-7qfx-c234-xg4g
• https://github.com/Erudika/scoold/security/advisories/GHSA-7qfx-c234-xg4g

Published

May 8, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4217A security vulnerability has been detected in XREAL Nebula A…2.5
• CVE-2026-42170A heap-based buffer overflow vulnerability exists in the GIM…7.8
• CVE-2026-42171NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12…7.8
• CVE-2026-42172Coolify is an open-source and self-hostable tool for managin…3.1
• CVE-2026-42174Kirby is an open-source content management system. Prior to …4.3
• CVE-2026-42175requests-hardened is a library that overrides the default be…6.5
• CVE-2026-42177linux-entra-sso is a browser plugin for Linux to SSO on Micr…5.3
• CVE-2026-4218A vulnerability was detected in myAEDES App up to 1.18.4 on …2.5
• CVE-2026-42180Lemmy is a link aggregator and forum for the fediverse. Prio…6.3
• CVE-2026-42181Lemmy is a link aggregator and forum for the fediverse. Prio…6.5
• CVE-2026-42183Argo Workflows is an open source container-native workflow e…6.5
• CVE-2026-42184Tauri is a framework for building binaries for all major des…8.8