Alerts This Week
Warning Icon 1 840
Alerts This Week
Warning Icon 1 840

Fedora 43 Vaultwarden-Web 2026.4.1 Critical Access Control Issues

fedora
Calendar Grey June 11, 2026
Dist Fedora Esm H88
Update to vaultwarden-web 2026.4.1 addresses access control issues and multiple CVEs.
update to 2026.4.1

Summary

Web vault for vaultwarden.

Update Information:

update to 2026.4.1

Topics%20covered

Topics Covered

security advisory unauthorized access fedora privilege escalation access control information disclosure

Change Log

* Wed Jun 3 2026 Jonathan Wright - 2026.4.1-1 - update to 2026.4.1 rhbz#2387335 - Fixes CVE-2026-27803 Unauthorized collection management operations due to improper access control - Fixes CVE-2026-27801 Two-factor authentication bypass allows unauthorized access and data deletion - Fixes CVE-2026-27802 Privilege Escalation via Unauthorized Bulk Permission Update - Fixes CVE-2026-27898 Information disclosure via API partial update * Sat Jan 17 2026 Fedora Release Engineering - 2025.7.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

References


[ 1 ] Bug #2444912 - CVE-2026-27898 vaultwarden-web: Vaultwarden: Information disclosure via API partial update [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2444912 [ 2 ] Bug #2444947 - CVE-2026-27801 vaultwarden-web: Vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion. [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2444947 [ 3 ] Bug #2444953 - CVE-2026-27802 vaultwarden-web: Vaultwarden: Privilege Escalation via Unauthorized Bulk Permission Update [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2444953

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-064873552d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: vaultwarden-web
Product: Fedora 43
Version: 2026.4.1
Release: 1.fc43
URL: https://github.com/dani-garcia/bw_web_builds
Summary: Web vault for vaultwarden

Topics%20covered

Topics Covered

security advisory unauthorized access fedora privilege escalation access control information disclosure

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here