{"id":"CVE-2026-111690","published":"2026-10-16T18:17:52.350","lastModified":"2026-10-16T19:03:18.127","description":"Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Auth.AccessSecret in api/etc/core.yaml. Attackers can sign a JWT with the public secret and roleId claim 001 to gain full administrative control over users, roles, menus, API authorities, configuration and tokens.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-321"],"vendors":[],"products":[],"references":[{"url":"https://github.com/suyuan32/simple-admin-core/blob/v1.8.7/api/etc/core.yaml#L6-L8","tags":[]},{"url":"https://github.com/suyuan32/simple-admin-core/pull/382","tags":[]},{"url":"https://hackmd.io/@hieuPenguinnn/simple-admin-core-hardcoded-jwt-accesssecret-admin-auth-bypass","tags":[]},{"url":"https://www.vulncheck.com/advisories/simple-admin-core-through-1.8.7-hard-coded-jwt-secret-authentication-bypass","tags":[]}],"exploitRefs":[{"url":"https://github.com/suyuan32/simple-admin-core/blob/v1.8.7/api/etc/core.yaml#L6-L8","tags":[]},{"url":"https://github.com/suyuan32/simple-admin-core/pull/382","tags":[]}],"hasPoc":true,"ai":{"summary":"The Simple Admin Core plugin contains a critical authentication bypass vulnerability due to a hard-coded secret key that allows attackers to forge administrator tokens and gain full administrative access. This flaw enables unauthorized users to completely compromise the system's user management, roles, menus, API permissions, configuration, and token systems.","exploitability":"The vulnerability is extremely easy to exploit with no prerequisites since attackers can directly sign JWT tokens using the hard-coded Auth.AccessSecret without needing any valid credentials or session data.","blast_radius":"If exploited, this vulnerability could allow attackers to fully compromise all administrative functions including user accounts, role management, menu configurations, API access controls, system settings, and token generation capabilities across the affected system.","remediation":"Immediate remediation requires upgrading to version 1.8.8 or later which contains the fix for the authentication bypass vulnerability in Simple Admin Core.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","jwt","admin-access","web"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:46:51.828Z"}}