CVE-2026-46689

Kanidm is an identity management platform. Prior to version 1.9.3, a single unauthenticated GET to any /scim/v1/... endpoint with a ?filter= query string of a few thousand nested parentheses (≈ 4–12 KB) drives the recursive-descent PEG parser past the worker thread's stack guard page. Rust responds to stack overflow with std::process::abort() — the entire kanidmd process exits. The parse runs inside axum's Query<ScimEntryGetQuery> extractor, before any handler body and therefore before any ACL check. This issue has been patched in version 1.9.3.

• CWE-248
• CWE-400
• CWE-674

• https://github.com/kanidm/kanidm/releases/tag/v1.9.3
• https://github.com/kanidm/kanidm/security/advisories/GHSA-r5fr-9gmv-jggh
• https://github.com/kanidm/kanidm/security/advisories/GHSA-r5fr-9gmv-jggh

Published

Jun 10, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46683Snappy is a PHP library allowing thumbnail, snapshot or PDF …6.9
• CVE-2026-46684DataEase is an open source data visualization and analysis t…9.5
• CVE-2026-46685RustFS is a distributed object storage system built in Rust.…6
• CVE-2026-46686Emlog is an open source website building system. In 2.6.13 a…8.5
• CVE-2026-46687Emlog is an open source website building system. In 2.6.13 a…7.7
• CVE-2026-46688The Meeting Room Booking System (MRBS) is a PHP-based applic…6.9
• CVE-2026-46690unbounded_spsc is an "unbounded" extension of bounded_spsc_q…5.8
• CVE-2026-46692ImageMagick is free and open-source software used for editin…4.1
• CVE-2026-46693ImageMagick is free and open-source software used for editin…4.1
• CVE-2026-46695Boxlite is a sandbox service that allows users to create lig…10
• CVE-2026-46696October System provides the system module for October Conten…3.3
• CVE-2026-46697Fediverse Embeds embeds fediverse posts on WordPress sites. …7.5