CVE-2026-56345

AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target users_id from the uploaded filename without verification. An attacker with knowledge of the Meet shared secret can craft a malicious file upload with a filename containing an arbitrary users_id to invoke passwordless User->login() and establish an authenticated session as any user including admin. Attackers can obtain the Meet shared secret through path-traversal vulnerabilities or timing attacks against checkToken.json.php, then POST a crafted file to uploadRecordedVideo.json.php with a filename like '1-anything.mp4' to hijack admin sessions and gain full account takeover.

• CWE-287

• https://github.com/WWBN/AVideo/security/advisories/GHSA-qxvm-r42f-5p8j
• https://www.vulncheck.com/advisories/avideo-arbitrary-user-session-hijacking-via-meet-plugin-uploadrecordedvideo-endpoint

Published

Jun 20, 2026

Last Modified

Jun 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56338Capgo before 12.128.2 contains a denial of service vulnerabi…6.9
• CVE-2026-56339Capgo (Cap-go/capgo) before 12.128.2 contains an information…8.7
• CVE-2026-5634A vulnerability was identified in projectworlds Car Rental P…7.3
• CVE-2026-56340vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tens…7.5
• CVE-2026-56341AVideo through version 26.0 contains multiple unauthenticate…8.7
• CVE-2026-56342AVideo through version 27.0 contains a server-side request f…6.8
• CVE-2026-56346AVideo through version 25.0 contains an authentication bypas…6.9
• CVE-2026-56347AVideo TopMenu plugin through version 26.0 contains a stored…6.1
• CVE-2026-56348n8n before 2.20.0 contains a credential exfiltration vulnera…9.9
• CVE-2026-56349n8n before version 2.10.0 contains an input validation vulne…6.3
• CVE-2026-5635A security flaw has been discovered in PHPGurukul Online Sho…6.3
• CVE-2026-56350n8n before 2.8.0 contains an authentication bypass vulnerabi…7.7