Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
CVE-2026-92792: OpenNHP up to 1.0.2 lets attackers bypass verification
CVE-2026-92792 · published 1 month ago
Summary
The OpenNHP software (versions up to 1.0.2) can be tricked into skipping its security check by sending specially crafted data. This lets an unauthorized user appear trusted and gain access to the system. Apply the vendor’s update or patch as soon as possible to close the gap.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| opennhp | opennhp | <= 1.0.2 |
Original advisory text
OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifier
OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a test_purpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the test_purpose key in evidence and providing enrolled measure and serial number pairs from the allowlist to gain unauthorized access.
References
- https://www.vulncheck.com/advisories/opennhp-through-1.0.2-authentication-bypass... Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92792... Vendor Advisory
- https://github.com/OpenNHP/opennhp/issues/1732 Third Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-92792 Vendor Advisory
- https://github.com/OpenNHP/opennhp Product
- https://github.com/OpenNHP/opennhp/blob/v1.0.2/nhp/core/verifier/verifier.go#L27... Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
8.3
High
Type
CWE-287Improper Authentication
Timeline
Published16 Sep 2026
Updated4 Nov 2026
First seen16 Sep 2026
Track software like this
Free during beta