CVE-2026-92467
8.3 HIGHpublic exploit availablePublished 2026-09-16 · Updated 2026-09-21
AI risk analysis
- Summary
- This vulnerability allows authenticated users to change any account password without verifying the current password, posing a significant risk to account security.
- Exploitability
- Exploitation is relatively straightforward as it requires only an authenticated user to send a request with a new password, making it a high risk if not mitigated.
- Blast radius
- If exploited, attackers can overwrite any non-administrator account's password, leading to unauthorized access to sensitive systems and data.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to version 6.1.0 or later of zlt2000 microservices-platform.
auth-bypasspassword-changemicroservices
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request body and a new password to overwrite credentials of any non-administrator account without verification.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Weaknesses
CWE-620
Public exploit & PoC references
- https://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C09_reset_any_user_password.py
- https://github.com/zlt2000/microservices-platform
- https://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-business/user-center/src/main/java/com/central/user/controller/SysUserController.java#L206
- https://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-business/user-center/src/main/java/com/central/user/service/impl/SysUserServiceImpl.java#L165
References
- https://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C09_reset_any_user_password.py
- https://github.com/zlt2000/microservices-platform
- https://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-business/user-center/src/main/java/com/central/user/controller/SysUserController.java#L206
- https://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-business/user-center/src/main/java/com/central/user/service/impl/SysUserServiceImpl.java#L165
- https://www.vulncheck.com/advisories/microservices-platform-through-6.0.0-unverified-password-change-via-users-password
Data: NVD (public domain). Analysis: local $0 model. Defensive use only.