Vulnerability · Published Oct 27, 2026 · Assigned by VulnCheck

CVE-2026-117564nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret

Critical 9.8

In plain English

A critical-severity security flaw in nest-admin from buqiyuan. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.6%top 51.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access.

Affected products (as reported)

Vendor	Product	Versions
buqiyuan	nest-admin	0 – before 1.0.1

Weakness: CWE-321 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

GitHub Issue #93 issue-tracking
https://github.com/buqiyuan/nest-admin product
https://github.com/buqiyuan/nest-admin/commit/f2cec8cb776cbf113115b33164dac69a46d24097 patch
GitHub Issue #92 issue-tracking
https://github.com/buqiyuan/nest-admin/blob/2eeccc4cb699d1aedbe04b4437a9d095cde02c74/.env.production#L5 technical-description
VulnCheck Advisory: nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret third-party-advisory