Peppermint Lab

3 CVEs across 2 Peppermint Lab products. Browse Peppermint Lab vulnerabilities, severities, and proof-of-concept exploits.

Peppermint Lab products with known CVEs

ProductCVEs
Peppermint3
Peppermint Lab CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-85391Critical9.82026-09-03Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any ac…
CVE-2026-72561High8.82026-08-11A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the p…
CVE-2026-72555High8.12026-08-11A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.roles_active flag defaults to false, causin…