Auth bypass in Hypr Passwordless

CVE-2026-4522

Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordless: before 11.1.1.

Vulnerability class: Broken Authentication

Affected products

Weakness classification (CWE)

References