CVE-2026-90942 — Casdoor through 4.4.0 Private Key Exposure via Certificate Endpoints
Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoints, allowing organization administrato…
Published: 2026-09-14 · CVSS: 9.3 · CVSS 4.0
Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoints, allowing organization administrators to retrieve it. Attackers can use the exposed private key to forge JWT tokens for any user in any organization, including global administrators.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7