CVE-2026-33920
LOW
NVD
CVSS Score
3.5
Severity
LOW
Published
Sep 08, 2026
Vendor
unknown
Description
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performed by the victim in this state is attributed to the attacker's account, compromising the integrity of the audit trail.