CVE-2026-72561
Received Received - Intake

Broken Access Control in Peppermint Lab Peppermint

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c

Description
A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before applying new OIDC issuer settings. An attacker can redirect all SSO logins to an attacker-controlled identity provider, enabling credential harvesting for all platform users.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-72561
EUVD
EUVD-2026-56031

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
peppermint_lab peppermint *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a broken access control vulnerability in Peppermint Lab Peppermint. It allows any authenticated non-admin user to change global OIDC/SSO settings through an unprotected endpoint. The endpoint lacks administrative role checks, letting attackers redirect all SSO logins to a malicious identity provider for credential harvesting.

Detection Guidance

Check for unprotected configuration endpoints by inspecting network traffic for POST requests to /api/config or similar paths. Look for unauthenticated or non-admin users modifying OIDC/SSO settings. Review server logs for suspicious activity around configuration changes.

Impact Analysis

An attacker could steal credentials for all platform users by redirecting SSO logins to a fake identity provider. This could lead to unauthorized access to sensitive data, account takeovers, and potential data breaches affecting all users of the platform.

Compliance Impact

This vulnerability could violate GDPR by exposing user credentials and personal data, leading to unauthorized access. For HIPAA, it risks compromising protected health information if SSO is used for healthcare systems. Both standards require strict access controls and data protection.

Mitigation Strategies

Immediately restrict access to configuration endpoints to administrative users only. Update Peppermint to the latest commit or apply a patch that enforces role-based access control. Monitor for unauthorized changes to OIDC/SSO settings and revoke any suspicious configurations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72561. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart