Home

Description

A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending.

PUBLISHED Reserved 2025-04-22 | Published 2025-07-24 | Updated 2026-01-20 | Assigner mitre

References

github.com/...2FAuth/security/advisories/GHSA-ph6w-q992-7qrx

github.com/...ommit/b82a7eb604ddfe994fadce7db3a9e4a201c54a83

cve.org (CVE-2025-45731)

nvd.nist.gov (CVE-2025-45731)

Download JSON