A warning was published about a flaw in nuxsmin sysPass

2026-11-13

KROMSE explanation

nuxsmin sysPass has a critical security flaw (CVE-2026-129110, CVSS 9.3). The official record says: sysPass 3.0.1 through 3.2.11 contains an authentication bypass vulnerability that allows unauthenticated attackers to reinstall an already-installed instance by POSTing to the install/install handler, which never checks isInstalled().

No confirmed attacks and no public attack code yet.

Anyone running nuxsmin sysPass.

Install the maker's update for nuxsmin sysPass as soon as it is out.
Not sure if you use it? KROMSE can check your product for free.

KROMSELive threat centreSign inAdd your repository or website to see if it impacts youAdd repo or website

A warning was published about a flaw in nuxsmin sysPass

KROMSE explanation

Loading the story…