CVE-2026-103397Published
OpenSave before 2.4.0-beta.1 Authentication Bypass via Spoofed Relay Sender
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-103397 · Microsoft / collected KEV context
cve-program · CVE-2026-103397
- https://gist.github.com/mansurmavlankulov/2ca66f95965fb9d4aab353bcf2434cdb
- https://github.com/Liquid-co/OpenSave/commit/2f2612b13233ac123e01a03cb3008c44bacaeae3
- https://github.com/Liquid-co/OpenSave/blob/v2.3.1/internal/p2p/wanclient_handlers.go#L268-L282
- https://github.com/Liquid-co/OpenSave
- https://www.vulncheck.com/advisories/opensave-before-2.4.0-beta.1-authentication-bypass-via-spoofed-relay-sender
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.