Vulnerability · Published Aug 11, 2026 · Assigned by TuranSec
CVE-2026-72561Peppermint Lab Peppermint - Broken Access Control
High 8.8
In plain English
A high-severity improper access control in Peppermint from Peppermint Lab. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).
Official description
A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before applying new OIDC issuer settings. An attacker can redirect all SSO logins to an attacker-controlled identity provider, enabling credential harvesting for all platform users.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Peppermint Lab | Peppermint | 0 – through ba6e217 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H