CVE-2026-92120

Summary

Apache Allura's OAuth1 implementation is vulnerable to request replay attacks, allowing attackers to reuse valid OAuth requests and potentially gain unauthorized access to user accounts or perform actions on their behalf. This critical vulnerability can lead to significant data exposure and privilege escalation.

Exploitability

Exploitation requires intercepting a valid OAuth1 request and replaying it within the token expiration window, making it moderately difficult but possible with network interception capabilities.

Blast radius

If exploited, this vulnerability could allow attackers to access user accounts, perform unauthorized actions, and potentially escalate privileges across the affected Allura instance.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Apache Allura version 1.22.0 which fixes the OAuth1 replay attack vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.