Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-26012
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
vaultwarden has Full Cipher Enumeration Ignoring Organization Collection Permissions
Source: NVD (National Vulnerability Database)
Vulnerability Description
vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.3, a regular organization member can retrieve all ciphers within an organization, regardless of collection permissions. The endpoint /ciphers/organization-details is accessible to any organization member and internally uses Cipher::find_by_org to retrieve all ciphers. These ciphers are returned with CipherSyncType::Organization without enforcing collection-level access control. This vulnerability is fixed in 1.35.3.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不正确
Source: NVD (National Vulnerability Database)
Vulnerability Title
Vaultwarden 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Vaultwarden是Daniel García个人开发者的一个用 Rust 编写的 Bitwarden 服务器 API 的替代实现。 vaultwarden 1.35.3之前版本存在安全漏洞，该漏洞源于端点/ciphers/organization-details访问控制不当，可能导致组织成员检索组织内的所有密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
dani-garciavaultwarden < 1.35.3 -
II. Public POCs for CVE-2026-26012
#POC DescriptionSource LinkShenlong Link
1CVE-2026-26012 — Proof of Concept Vaultwarden — Full Cipher Enumeration Ignoring Organization Collection Permissionshttps://github.com/Dulieno/CVE-2026-26012POC Details
2CVE-2026-26012 - Vaultwarden - Authentified Organization Collection Permissions Bypass & Cipher Enumeration https://github.com/diegobaelen/CVE-2026-26012POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2026-26012
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same product: vaultwarden
Same vendor: dani-garcia
Same weakness: CWE-863
V. Comments for CVE-2026-26012

No comments yet

Leave a comment