{"id":"CVE-2026-85638","title":"A weakness has been identified in jofpin trape 2.0","summary":"A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit h…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-285","CWE-639"],"vendor":"jofpin","product":"trape","affected":["trape 2.0"],"published":"2026-09-04","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:31.720","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-85638","references":[{"url":"https://github.com/jofpin/trape/","label":"cna@vuldb.com"},{"url":"https://github.com/jofpin/trape/issues/407","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-85638","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/895139","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/398786","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/398786/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-11T20:03:25.884099Z"},"epss":0.00302,"epssPercentile":0.23125,"ingestedAt":"2026-09-08T15:33:26.964Z","slug":"CVE-2026-85638","body":"## Overview\n\nA weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":52,"depthScoreParts":{"impact":40.2,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202051,"id":"CVE-2026-85638","ts":1789400047009,"field":"exploit_available","old":"false","new":"true"},{"seq":200778,"id":"CVE-2026-85638","ts":1789397615483,"field":"exploit_available","old":"true","new":"false"},{"seq":199471,"id":"CVE-2026-85638","ts":1789395514599,"field":"exploit_available","old":"false","new":"true"},{"seq":198716,"id":"CVE-2026-85638","ts":1789392243052,"field":"exploit_available","old":"true","new":"false"},{"seq":197049,"id":"CVE-2026-85638","ts":1789384291411,"field":"exploit_available","old":"false","new":"true"},{"seq":196379,"id":"CVE-2026-85638","ts":1789383756564,"field":"exploit_available","old":"true","new":"false"},{"seq":195826,"id":"CVE-2026-85638","ts":1789380634505,"field":"exploit_available","old":"false","new":"true"},{"seq":194178,"id":"CVE-2026-85638","ts":1789378782162,"field":"exploit_available","old":"true","new":"false"},{"seq":192965,"id":"CVE-2026-85638","ts":1789376514024,"field":"exploit_available","old":"false","new":"true"},{"seq":191752,"id":"CVE-2026-85638","ts":1789373630179,"field":"exploit_available","old":"true","new":"false"},{"seq":190537,"id":"CVE-2026-85638","ts":1789369473028,"field":"exploit_available","old":"false","new":"true"},{"seq":189324,"id":"CVE-2026-85638","ts":1789368408090,"field":"exploit_available","old":"true","new":"false"},{"seq":188107,"id":"CVE-2026-85638","ts":1789365229645,"field":"exploit_available","old":"false","new":"true"},{"seq":186894,"id":"CVE-2026-85638","ts":1789363470375,"field":"exploit_available","old":"true","new":"false"},{"seq":185680,"id":"CVE-2026-85638","ts":1789361227948,"field":"exploit_available","old":"false","new":"true"},{"seq":184467,"id":"CVE-2026-85638","ts":1789358362720,"field":"exploit_available","old":"true","new":"false"},{"seq":182718,"id":"CVE-2026-85638","ts":1789354316045,"field":"exploit_available","old":"false","new":"true"},{"seq":181511,"id":"CVE-2026-85638","ts":1789353316772,"field":"exploit_available","old":"true","new":"false"},{"seq":180304,"id":"CVE-2026-85638","ts":1789350283683,"field":"exploit_available","old":"false","new":"true"},{"seq":179097,"id":"CVE-2026-85638","ts":1789348291949,"field":"exploit_available","old":"true","new":"false"},{"seq":177890,"id":"CVE-2026-85638","ts":1789346368980,"field":"exploit_available","old":"false","new":"true"},{"seq":176683,"id":"CVE-2026-85638","ts":1789343183600,"field":"exploit_available","old":"true","new":"false"},{"seq":174800,"id":"CVE-2026-85638","ts":1789334874613,"field":"exploit_available","old":"false","new":"true"},{"seq":173595,"id":"CVE-2026-85638","ts":1789333685861,"field":"exploit_available","old":"true","new":"false"},{"seq":172409,"id":"CVE-2026-85638","ts":1789331091976,"field":"exploit_available","old":"false","new":"true"},{"seq":171223,"id":"CVE-2026-85638","ts":1789328779955,"field":"exploit_available","old":"true","new":"false"},{"seq":170018,"id":"CVE-2026-85638","ts":1789327196117,"field":"exploit_available","old":"false","new":"true"},{"seq":168813,"id":"CVE-2026-85638","ts":1789323839113,"field":"exploit_available","old":"true","new":"false"},{"seq":167608,"id":"CVE-2026-85638","ts":1789319701310,"field":"exploit_available","old":"false","new":"true"},{"seq":166403,"id":"CVE-2026-85638","ts":1789318775171,"field":"exploit_available","old":"true","new":"false"},{"seq":165198,"id":"CVE-2026-85638","ts":1789315788899,"field":"exploit_available","old":"false","new":"true"},{"seq":163993,"id":"CVE-2026-85638","ts":1789313633364,"field":"exploit_available","old":"true","new":"false"},{"seq":162788,"id":"CVE-2026-85638","ts":1789311902363,"field":"exploit_available","old":"false","new":"true"},{"seq":161583,"id":"CVE-2026-85638","ts":1789308732309,"field":"exploit_available","old":"true","new":"false"},{"seq":159696,"id":"CVE-2026-85638","ts":1789300469573,"field":"exploit_available","old":"false","new":"true"},{"seq":158829,"id":"CVE-2026-85638","ts":1789299571961,"field":"exploit_available","old":"true","new":"false"},{"seq":158294,"id":"CVE-2026-85638","ts":1789296693070,"field":"exploit_available","old":"false","new":"true"},{"seq":156685,"id":"CVE-2026-85638","ts":1789294754680,"field":"exploit_available","old":"true","new":"false"},{"seq":155480,"id":"CVE-2026-85638","ts":1789292966884,"field":"exploit_available","old":"false","new":"true"},{"seq":154275,"id":"CVE-2026-85638","ts":1789289796643,"field":"exploit_available","old":"true","new":"false"},{"seq":151526,"id":"CVE-2026-85638","ts":1789277628828,"field":"exploit_available","old":"false","new":"true"},{"seq":150487,"id":"CVE-2026-85638","ts":1789276244754,"field":"exploit_available","old":"true","new":"false"},{"seq":149454,"id":"CVE-2026-85638","ts":1789273823682,"field":"exploit_available","old":"false","new":"true"},{"seq":148421,"id":"CVE-2026-85638","ts":1789271347835,"field":"exploit_available","old":"true","new":"false"},{"seq":146452,"id":"CVE-2026-85638","ts":1789269393586,"field":"exploit_available","old":"false","new":"true"},{"seq":145257,"id":"CVE-2026-85638","ts":1789266338672,"field":"exploit_available","old":"true","new":"false"},{"seq":144161,"id":"CVE-2026-85638","ts":1789262615723,"field":"exploit_available","old":"false","new":"true"},{"seq":143065,"id":"CVE-2026-85638","ts":1789261532522,"field":"exploit_available","old":"true","new":"false"},{"seq":141896,"id":"CVE-2026-85638","ts":1789258830732,"field":"exploit_available","old":"false","new":"true"},{"seq":140737,"id":"CVE-2026-85638","ts":1789256726253,"field":"exploit_available","old":"true","new":"false"}]}