CVE-2026-76243
CriticalCVSS 9.2Summary
stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Attackers can perform read, write, and federation operations with anonymous identity when nodes are exposed outside local development environments.
Risk Assessment
Unauthorized access to data and operations, potentially leading to data integrity and confidentiality breaches and unauthorized federation changes.
Recommendation
Enable authentication on all non-loopback deployments or restrict access to trusted networks.
Original NVD description (English source)
stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Attackers can perform read, write, and federation operations with anonymous identity when nodes are exposed outside local development environments.