Auth bypass in Hypr Passwordless

CVE-2026-4522

Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordless: before 11.1.1.

Vulnerability class: Broken Authentication

EPSS: 0.001 (2.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References