CVE-2026-76243
Critical · CVSS 9.2- CVSS
- 9.2
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-285
Description
stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Attackers can perform read, write, and federation operations with anonymous identity when nodes are exposed outside local development environments.
Affected packages
| PyPI | stigmem-node | 0 → 0.9.0a2 |
References
Status: profiled · ingested 2026-09-25T00:00:19.000Z