CVE-2026-44347 Warpgate: SSO CSRF -- State Token Not Validated on Return
Attackers can trick users into logging into attacker-controlled accounts via SSO, potentially leading to unauthorized data modification or access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-44347?
CVE-2026-44347 is a medium-severity vulnerability in warp-tech warpgate, published on 12 May 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.23.3, the SSO flow does not validate the state parameter, which makes it possible for an attacker to trick a user into logging into the attacker's account, possibly convincing them to perform sensitive actions on the attacker's account (such as writing sensitive data to the attacker's SSH target, or logging into an HTTP target that the attacker set up). This vulnerability is fixed in 0.23.3.
Weakness: CWE-352
Which versions are affected by CVE-2026-44347?
It affects 1 product.
Products include Warpgate Project Warpgate.
How do I fix CVE-2026-44347?
No fix has been published for CVE-2026-44347 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-44347 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-44347 exists.
Other vulnerabilities in warp-tech warpgate
Sources
Also known as GHSA-rj86-hm3r-c275.