{"id":"CVE-2026-71206","title":"Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature and returns the embedded claims.Account object unmodified, never re-fetching the account from the database","summary":"Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature and returns the embedded claims.Account object unmodified, never re-fetching the account from the database. No session store or token-revocat…","severity":"high","cvss":8.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-613"],"published":"2026-08-05","updated":"2026-08-10","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-71206","references":[{"url":"https://github.com/go-shiori/shiori","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}],"tags":["nvd","exploit-available"],"epss":0.0028,"epssPercentile":0.20697,"ingestedAt":"2026-08-10T12:39:48.325Z","exploits":{"github":1,"githubRepos":["https://github.com/Nel-droid/CVE-2026-71206-PoC"],"checkedAt":"2026-09-23T07:14:41.573Z"},"exploitAvailable":true,"slug":"CVE-2026-71206","body":"## Overview\n\nShiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature and returns the embedded claims.Account object unmodified, never re-fetching the account from the database. No session store or token-revocation mechanism exists in the codebase.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":58,"depthScoreParts":{"impact":45.7,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":5456,"id":"CVE-2026-71206","ts":1788887284187,"field":"exploit_available","old":"false","new":"true"},{"seq":4339,"id":"CVE-2026-71206","ts":1788886398198,"field":"exploit_available","old":"true","new":"false"},{"seq":3068,"id":"CVE-2026-71206","ts":1788883061378,"field":"exploit_available","old":"false","new":"true"},{"seq":2097,"id":"CVE-2026-71206","ts":1788882466269,"field":"exploit_available","old":"true","new":"false"},{"seq":1163,"id":"CVE-2026-71206","ts":1788881903037,"field":"exploit_available","old":"false","new":"true"}]}