What’s Vulnerable › Products

warp-tech warpgate vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your warp-tech warpgate version is affected

Latest warp-tech warpgate vulnerabilities

• CVE-2026-91167 — Warpgate: Missing authorization check on `PUT /users/:id/roles/:role_id` allows any admin to bypass the `AccessRolesAssign` permission boundary (CVSS 6.0)
• CVE-2026-91166 — Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target (CVSS 5.7)
• CVE-2026-91165 — Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values (CVSS 2.4)
• CVE-2026-91164 — Warpgate: API tokens bypass the user's allowed_ip_ranges restriction (CVSS 4.3)
• CVE-2026-63330 — Warpgate: Missing Admin Authorization on Live Recording Stream WebSocket Allows Any Authenticated User to Eavesdrop on Terminal Sessions (CVSS 7.7)
• CVE-2026-63329 — Warpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targets (CVSS 4.9)
• CVE-2026-58491 — Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter (CVSS 9.3)
• CVE-2026-44347 — Warpgate: SSO CSRF -- State Token Not Validated on Return (CVSS 6.5)
• CVE-2026-42189 — Russh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth (CVSS 7.5)
• CVE-2025-54804 — Russh is missing an overflow check during channel windows adjust (CVSS 6.5)
• CVE-2024-43410 — Russh has an OOM Denial of Service due to allocation of untrusted amount (CVSS 7.5)
• CVE-2023-48712 — User authorization bug leading to privilege escalation in warpgate (CVSS 8.8)
• CVE-2023-43660 — SSH key password bypassed in warpgate (CVSS 8.1)
• CVE-2023-37268 — User login confusion with SSO in warpgate (CVSS 8.8)