Which versions of Jet Admin are affected by CVE-2026-75932?

Jet Admin, a no-code internal-tools platform, contains a critical vulnerability (CVE-2026-75932, CVSS 9.2) enabling remote attackers to hijack custom domains and steal OAuth credentials used for…

How to fix or mitigate CVE-2026-75932?

Within 24 hours: Inventory all internal applications and workflows deployed on Jet Admin and identify those handling sensitive data or integrated with OAuth providers. Within 7 days: Immediately rotate all OAuth Client IDs and Client Secrets for any identity providers linked to Jet Admin instances; isolate Jet Admin by restricting network access to trusted internal networks only (VPN or static IP allowlist) to block remote exploitation attempts. Within 30 days: Monitor Jet Admin's security advisories and vendor communications for patch release; establish a remediation timeline either to apply the patch immediately upon release or to migrate critical internal tools to alternative platforms if patching timelines exceed organizational risk tolerance.

Jet Admin CVE-2026-75932

Q: What is the CVSS score of CVE-2026-75932?

CVE-2026-75932 has a CVSS 4.0 base score of 9.2 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-63997 CRITICAL

Missing Authorization (CWE-862)

2026-08-21 9119a7d8-5eab-497f-8521-727c672e3725

GHSA-cm72-j98h-q99g

Authentication Bypass

9.2

CVSS 4.0 · Vendor: 9119a7d8-5eab-497f-8521-727c672e3725

Severity by source

Vendor (9119a7d8-5eab-497f-8521-727c672e3725) PRIMARY

9.2 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

10.0 CRITICAL

No auth needed to create an app and claim another tenant's domain (PR:N, AC:L); scope changes to the victim tenant (S:C); OAuth secret theft is C:H, traffic reroute is A:H, config edit I:L.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:H/SI:N/SA:N

Primary rating from Vendor (9119a7d8-5eab-497f-8521-727c672e3725).

CVSS VectorVendor: 9119a7d8-5eab-497f-8521-727c672e3725

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 21, 2026 - 16:35 vuln.today

CVE Published

Aug 21, 2026 - 16:18 cve.org

CRITICAL 9.2

DescriptionCVE.org

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth Client ID and Client Secret if the victim is using an OAuth provider.

Articles & Coverage 1

medium.com CVE-2026-75932 & CVE-2026-75933: Jet Admin Tenant Isolation Bypass and Stored XSS Allow Cross-Tenant Data Access Aug 25, 2026

AnalysisAI

Domain and OAuth-credential hijacking in the Jet Admin no-code internal-tools platform lets a remote attacker create their own malicious app, bind it to a victim's configured custom domain, alter the authentication configuration, and silently reroute the victim's traffic to attacker-controlled logic. Because the takeover also copies the victim's OAuth Client ID and Client Secret into the attacker's workspace, it doubles as a credential-theft primitive against any tenant using an OAuth identity provider. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Delivery

Build malicious app

Exploit

Bind app to victim custom domain

Execution

Edit domain auth configuration

Impact

Reroute victim traffic and harvest OAuth Client ID/Secret

Access

Delivery

Build malicious app

Exploit

Bind app to victim custom domain

Execution

Edit domain auth configuration

Impact

Reroute victim traffic and harvest OAuth Client ID/Secret

Vulnerability AssessmentAI

Exploitation	Exploitation requires that the target organization has configured a custom domain in Jet Admin, and the OAuth-credential-theft consequence specifically requires that the victim tenant uses an OAuth provider for authentication - a tenant with no custom domain or no OAuth configured is not exposed to the full impact. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The signals point to a genuinely high-priority, low-friction issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker registers a Jet Admin workspace, builds a malicious app, and binds it to a target organization's custom domain, then edits that domain's authentication configuration to reroute incoming users to attacker-controlled logic. End users visiting the legitimate domain are served the attacker's app, and the attacker's workspace is automatically populated with the victim's OAuth Client ID and Client Secret; no POC is publicly referenced, but the described steps require only standard platform features.
Remediation	No vendor-released patch version is identified in the available data, and as a hosted platform the fix is expected to be applied server-side by Jet Admin rather than via a customer upgrade; consult the CISA CSAF advisory (https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-232-02.json) and the vendor at https://www.jetadmin.io/ for authoritative status. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Inventory all internal applications and workflows deployed on Jet Admin and identify those handling sensitive data or integrated with OAuth providers. …

Threat intelligence, references, and detailed analysis are available after sign-in.