9.8 Critical
CVE-2026-9097
CVE-2026-9097
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 24 Oct
0.5%probability of exploitation in the next 30 days
Higher than 41% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
Casdoor versions 2.362.0 and earlier do not verify that a JWT used for token exchange is still active. The GetTokenExchangeToken() function in object/token_oauth.go validates the JWT signature and parses its claims, but never queries the Token table to verify whether the subject token has been revoked or invalidated. Because the revocation check is entirely absent, administrators are unable to terminate active sessions or revoke compromised tokens.
Coverage 1 article · 1 outlet
- Severe Casdoor Identity Platform Flaws Expose Corporate NetworksSecurityOnline · first in our coverage · mentions it in passing