CVE-2026-45177 Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-45177?
CVE-2026-45177 is a critical vulnerability in CyberArk Software, a Palo Alto Networks Company Conjur Cloud (Edge Finding only), published on 11 Jun 2026.
Official description
Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting a specially crafted request. Under specific circumstances, this could allow the attacker to manipulate internal validation mechanisms, potentially leading to a bypass of identity verification and the unauthorized acquisition of an access token. CyberArk Security Bulletin: CA26-20
Weakness: CWE-284
Which versions are affected by CVE-2026-45177?
It affects 1 product.
Products include Paloaltonetworks Idira Secrets Manager Edge.
How do I fix CVE-2026-45177?
No fix has been published for CVE-2026-45177 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-45177 being exploited?
There is no known exploitation of CVE-2026-45177 in the wild and no public exploit code.
Sources
Also known as GHSA-6x94-6f82-g4jw.