What is CVE-2026-73519?
CVE-2026-73519 is a critical authentication bypass vulnerability in WolfStack versions before 25.9.2. A hard-coded cluster-authentication secret was discovered compiled into every build within `src/auth/mod.rs`, allowing remote unauthenticated attackers to bypass the `require_auth()` gate by supplying this value in the `X-WolfStack-Secret` header. Immediate update to version 25.9.2 or later is required.
Azərbaycanca: CVE-2026-73519 WolfStack-in 25.9.2-dən əvvəlki versiyalarında tapılan ciddi autentifikasiya boşluğudur. `src/auth/mod.rs` faylında sabit kodlaşdırılmış 'cluster-authentication secret' aşkar edilib ki, bu da uzaqdan autentifikasiya olunmamış hücumçulara `X-WolfStack-Secret` başlığı ilə bu dəyəri göndərərək `require_auth()` qapısından yan keçməyə imkan verir. WolfStack-i dərhal 25.9.2 və ya daha yuxarı versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-798
FAQ2
Which WolfStack versions are affected by CVE-2026-73519?
CVE-2026-73519 affects WolfStack versions before 25.9.2.
Which HTTP header does an attacker use to bypass the `require_auth()` gate?
An attacker bypasses the `require_auth()` gate by supplying the hard-coded `cluster-authentication secret` value in the `X-WolfStack-Secret` header.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.