Skip to content

Known vulnerabilities in dromara MaxKey

Is your version affected?

CVE Summary Score Published
CVE-2026-69102 MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in… 9.3 Critical Aug 11, 2026
CVE-2026-67345 MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in… 8.5 High Jul 30, 2026
CVE-2026-7699 A security flaw has been discovered in Dromara MaxKey up to 3.5.13 5.3 Medium May 3, 2026
CVE-2025-6517 A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical 5.3 Medium Jun 23, 2025

Other dromara products