CVE-2026-102275 PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
Attackers can bypass token validation by exploiting inconsistent OKP JWK components, allowing use of stolen tokens without the legitimate private key.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-102275?
CVE-2026-102275 is a medium-severity vulnerability in jpadilla pyjwt, published on 28 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.from_jwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding x and d components. As a result, identity derived from x can differ from operations performed with d. Consequently, if an integration also accepts private key parameters from a proof header without rejecting them, an attacker may use a stolen sender-constrained token without the legitimate private key. This issue is fixed in version 2.15.0.
Which versions are affected by CVE-2026-102275?
3 open source packages ship an affected version, including pyjwt and PyJWT. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
pyjwt PyPI | From 2.1.0 | 2.15.0 |
pyjwt PyPI | From 2.1.0 | 2.15.0 |
PyJWT PyPI | From 2.1.0 | 2.15.0 |
Products include Pyjwt Project Pyjwt.
How do I fix CVE-2026-102275?
Upgrade pyjwt to 2.15.0 or later.
Is CVE-2026-102275 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-102275 exists.
Other vulnerabilities in jpadilla pyjwt
- CVE-2026-102268 PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
- CVE-2026-32597 PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
- CVE-2026-102266 PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation
- CVE-2026-102267 PyJWT: PyJWKClient follows redirects when fetching JWKS
- CVE-2026-102271 PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
Sources
Also known as AZL-105233, CLEANSTART-2026-QX32909, CLEANSTART-2026-WH43251, DEBIAN-CVE-2026-102275, ECHO-5c06-a158-9d54, GHSA-x33g-cr3x-6449 and 26 more.