CVE-2026-75627
Received Received - Intake

Bastillion Authentication Bypass via Path Traversal

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: VulnCheck

Description
Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments. Attackers can access administrative controllers to read user listings, create manager accounts, and register managed systems, gaining control over SSH access to the managed fleet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
CVE-2026-75627
EUVD
EUVD-2026-60578

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
bastillion software to 5.1.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-288 The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Bastillion is an authentication bypass flaw where attackers can manipulate request URIs by adding arbitrary path segments before legitimate paths like /manage/ or /admin/. The system's authentication filter only checks if URIs start with these paths but uses substring matching, allowing unauthenticated access to administrative controllers.

Detection Guidance

Check Bastillion logs for unusual requests with path segments before /manage/ or /admin/. Look for URIs containing semicolons or extra slashes like /x;/manage/viewUsers.ktrl. Inspect network traffic for unauthenticated admin controller access attempts.

Impact Analysis

An attacker could gain full administrative control over Bastillion, including reading user listings, creating manager accounts, registering managed systems, and accessing SSH keys. This could lead to compromise of the entire managed infrastructure through unauthorized SSH access.

Compliance Impact

This vulnerability likely violates compliance requirements for access control and data protection in GDPR and HIPAA. Unauthorized administrative access could lead to unauthorized data exposure, violating confidentiality and integrity requirements mandated by these regulations.

Mitigation Strategies

Upgrade Bastillion to the patched version addressing CVE-2026-75627. Apply the routing fix using getServletPath() for exact matching. Add explicit authentication checks for WebSocket endpoints. Enable login throttling to prevent brute-force attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75627. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart