What is CVE-2026-73501?
CVE-2026-73501 is a vulnerability found in kin-openapi, a Go project for handling OpenAPI files. Before version 0.144.0, the ValidationHandler.Load() silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which permits every OpenAPI request without checking credentials. Users should update kin-openapi to version 0.144.0 or higher.
Azərbaycanca: CVE-2026-73501, OpenAPI fayllarını emal edən Go layihəsi olan kin-openapi-də aşkarlanmış boşluqdur. 0.144.0 versiyasından əvvəl, ValidationHandler.Load() funksiyası nil AuthenticationFunc-i NoopAuthenticationFunc ilə səssizcə əvəz edərək, etimadnamə yoxlamasını keçərək hər OpenAPI sorğusuna icazə verir. İstifadəçilər kin-openapi-ni 0.144.0 və ya daha yuxarı versiyaya yeniləməlidirlər.
Related CVEs
link basis: same weakness class CWE-306
FAQ2
In which function does the CVE-2026-73501 vulnerability occur in the kin-openapi project?
The vulnerability occurs in the ValidationHandler.Load() function, where a nil AuthenticationFunc is silently replaced with NoopAuthenticationFunc, bypassing credential checks.
To which version should users upgrade to mitigate CVE-2026-73501?
Users should update kin-openapi to version 0.144.0 or higher.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.