Pingvin Share X
Monthly
Pingvin Share X versions 1.5.0 through 1.18.0 expose an authentication bypass in TOTP management endpoints due to a JavaScript async/await coding defect. An authenticated attacker with a low-privileged account can modify or disable TOTP two-factor authentication settings on an account without supplying a correct password, effectively neutralizing 2FA protections. No active exploitation has been identified in CISA KEV, and no public exploit code has been reported, but the bypass is trivially reachable by any valid user of an affected self-hosted instance.
Pingvin Share X versions 1.5.0 through 1.18.0 expose an authentication bypass in TOTP management endpoints due to a JavaScript async/await coding defect. An authenticated attacker with a low-privileged account can modify or disable TOTP two-factor authentication settings on an account without supplying a correct password, effectively neutralizing 2FA protections. No active exploitation has been identified in CISA KEV, and no public exploit code has been reported, but the bypass is trivially reachable by any valid user of an affected self-hosted instance.