CyberRota Analysis
AI-GeneratedAudiobookshelf versions prior to 2.36.0 are vulnerable due to improper handling of JWTs, where refresh tokens can be mistakenly treated as bearer access tokens for API and WebSocket endpoints. This misconfiguration allows unauthorized access to user accounts, potentially compromising sensitive user data. Users and administrators of Audiobookshelf should prioritize upgrading to version 2.36.0 to mitigate this security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/TokenManager.js treats JWTs with the refresh token type as bearer access tokens on API and WebSocket resource endpoints such as /api/me instead of restricting them to /auth/refresh, allowing refresh tokens to authenticate as the associated users. This issue is fixed in version 2.36.0.