Description
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks.
Published: 2026-08-29
Score: 8.6 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability in pac4j-core before version 6.5.6 is caused by the CheckProfileTypeAuthorizer reversing the profile type validation logic. An attacker can authenticate with a weaker client profile that satisfies generic checks but bypasses the required stronger profile type checks, effectively granting access to resources that should be protected by stricter authorization.

Affected Systems

Pac4j pac4j library, versions below 6.5.6. The affected component is the CheckProfileTypeAuthorizer in pac4j-core.

Risk and Exploitability

The CVSS score of 8.6 classifies this as a high‑severity vulnerability. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector involves the authentication flow where CheckProfileTypeAuthorizer is invoked, allowing an attacker to impersonate a client with a weaker profile and gain access to resources intended for a stronger profile.

Generated by OpenCVE AI on August 29, 2026 at 17:24 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade pac4j to version 6.5.6 or later.
  • Replace or update the CheckProfileTypeAuthorizer component to the fixed implementation.
  • Configure your application to enforce strict profile type checks and review any custom authorization logic that may rely on the old validation behavior.

Generated by OpenCVE AI on August 29, 2026 at 17:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 29 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
Description pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks.
Title pac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type Check
First Time appeared Pac4j
Pac4j pac4j
Weaknesses CWE-863
CPEs cpe:2.3:a:pac4j:pac4j:*:*:*:*:*:*:*:*
Vendors & Products Pac4j
Pac4j pac4j
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}

cvssV4_0

{'score': 8.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Pac4j Pac4j
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-08-29T16:35:26.904Z

Reserved: 2026-08-29T14:11:00.955Z

Link: CVE-2026-82463

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-29T17:17:58.490

Modified: 2026-08-29T17:17:58.490

Link: CVE-2026-82463

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-29T17:30:12Z

Weaknesses