Auth bypass in Hypr Server

CVE-2026-2414

Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2.

Vulnerability class: IDOR (Insecure Direct Object Reference)

EPSS: 0.001 (20.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References