CVE-2026-52111

CVSS 9.8 (critical) · published 2026-09-01

An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey

Weakness: CWE-284

Source: NVD CVE-2026-52111

References

• https://gist.github.com/L4wCat/924c10c36d6d11651049787d547d411b
• https://github.com/haierkeys/fast-note-sync-service/issues/268

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.