by Kastro
Paper/Archive/CVE-2026-32714

CVE-2026-32714

scitokens scitokens — SciTokens vulnerable to SQL Injection in KeyCache

EPSS 0.5%public exploitCVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 42.9.429 × 208.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the KeyCache class in scitokens was vulnerable to SQL Injection because it used Python's str.format() to construct SQL queries with user-supplied data (such as issuer and key_id). This allowed an attacker to execute arbitrary SQL commands against the local SQLite database. This issue has been patched in version 1.9.6.

Affected

ProductAffectedFixed inSource
scitokens< 1.9.6–CNA

Scores by source

GitHub_M (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitgithub.com/scitokens/scitokens/security/advisories/GHSA-rh5m-2482-966crefgithub.com/scitokens/scitokens/commit/3dba108853f2f4a6c0f2325c03779bf083c41cf2refgithub.com/scitokens/scitokens/releases/tag/v1.9.6