Authentication Bypass by Alternate Name in kin-openapi - #VU144335
Published: August 19, 2026
Vulnerability details
The vulnerability allows a remote attacker to bypass authentication and access a protected handler.
The vulnerability exists due to authentication bypass by alternate name in openapi3filter.ValidationHandler.Middleware when processing requests with encoded paths through a downstream router using different path interpretation semantics. A remote attacker can send a specially crafted request using an encoded path to bypass authentication and access a protected handler.
Exploitation requires the validation layer and downstream router to select different operations for the same request, such as when a public exact route and a protected parameterized route overlap after decoding and use the same HTTP method.