CyberRota Analysis
AI-GeneratedUTMStack versions prior to 11.2.16 are vulnerable to an authentication bypass, enabling remote attackers to gain full administrative API access by exploiting the Utm-Internal-Key header. This critical vulnerability allows unauthorized users to create accounts, manage users, exfiltrate data, and alter security configurations without proper authentication mechanisms in place. Organizations utilizing UTMStack should prioritize patching this vulnerability to mitigate the risk of unauthorized access and potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access by presenting a valid Utm-Internal-Key header matching the INTERNAL_KEY environment variable value, which the InternalApiKeyFilter accepts for any endpoint without path restriction, constant-time comparison, rate limiting, or audit logging. Attackers who obtain the key value can authenticate without a user account or JWT to create accounts, manage users, exfiltrate data, and modify security rules.