Skip to content

Missing authentication for a critical function

Named by 2 kept items in this workspace.

Search every workspace for Missing authentication for a critical function. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • lee1981 (@lee1981b) on X
    advisory2026-10-20It is written here as Missing authentication for a critical function (CWE-306): get_user_from_headers builds an admin-role user whether or not the optional user header is supplied.

    CWE-306

  • Endor Labs: Claude Fable 5
    writeup2026-06-18

    OpenStack Aodh accepting client-supplied Keystone trust IDs; also related information exposure by echoing trust IDs back in API responses

All techniques in this workspace.