ID:12524 - Exploit for Improper verification of cryptographic signature in pac4j - CVE-2026-29000

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass authentication checks.

The vulnerability exists due to an error in JwtAuthenticator when processing encrypted JWTs. A remote non-authenticated attacker with possession of the server's RSA public key can create a JWE-wrapped PlainJWT with arbitrary subject and role claims, bypass signature verification and authenticated as any user including administrators.

Remediation