EUVD-2026-69790
GHSA-gpww-2qcp-q6c7
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network reset with no interaction gives AV:N/AC:L/PR:N/UI:N; account takeover of a credential vault yields C:H/I:H, with no availability impact (A:N).
Primary rating from Vendor (vulncheck).
CVSS VectorVendor: vulncheck
Lifecycle Timeline
3DescriptionCVE.org
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account passwords and authenticate as those users to gain unauthorized access.
AnalysisAI
Authentication bypass in Team Password Manager before 14.184.308 lets unauthenticated remote attackers abuse the local account password-reset flow to set arbitrary passwords for existing local users and then log in as them. Because this product is a self-hosted vault storing credentials for entire teams, a successful reset yields full account takeover and access to whatever secrets the victim can view. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the target user is a local account (the product's own authentication, as opposed to LDAP/AD-backed accounts) and that the attacker can reach the Team Password Manager web application's password-reset endpoint over the network. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely high-priority issue rather than an inflated CVSS. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade to Team Password Manager 14.184.308 or later, which corrects the authentication enforcement in the local account password-reset flow; see the vendor changelog (https://teampasswordmanager.com/docs/changelog/) and release announcement (https://teampasswordmanager.com/blog/chrome-extension-6.42.27-tpm-14.184.308/). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Team Password Manager instances in your environment and document their current versions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today