Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by manipulating the original_username cookie. Attackers can set the client-controlled original_username cookie to any value and request a switch to user ID 1 to obtain session tokens or password hashes belonging to administrator accounts.
| Vendor | Product | Versions |
|---|---|---|
| pachno | pachno | 1.0.6 |
Updated severity to HIGH and marked the vulnerability as actively exploited.
Initial creation
