Sim
CVE-2026-3432
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
2DescriptionCVE.org
On SimStudio version below to 0.5.74, the /api/auth/oauth/token endpoint contains a code path that bypasses all authorization checks when provided with credentialAccountUserId and providerId parameters. An unauthenticated attacker can retrieve OAuth access tokens for any user by supplying their user ID and a provider name, effectively stealing credentials to third-party services.
AnalysisAI
SimStudio has a second authorization flaw in the OAuth token endpoint that allows privilege escalation through crafted token requests.
Technical ContextAI
SimStudio < 0.5.74 has a CWE-862 authorization bypass in /api/auth/oauth/token that allows attackers to obtain tokens with elevated privileges.
RemediationAI
Update SimStudio.
SimStudio below 0.5.74 has a missing authorization on MongoDB tool endpoints that allows attackers to execute arbitrary
Missing authentication in the file upload API endpoint of SimStudioAI Sim allows remote unauthenticated attackers to upl
Improper authentication in Sim's CRON secret handler allows attackers to bypass authentication on internal APIs and CRON
A vulnerability classified as critical has been found in SimStudioAI sim up to 0.1.17. Affected is the function handleLo
A vulnerability was identified in SimStudioAI sim up to 1.0.0. Rated medium severity (CVSS 5.3), this vulnerability is r
Deployment authentication token weakness in SimStudioAI Sim up to 0.6.92 leaks a truncated SHA-256 derivative of the enc
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today