CVE-2026-77567
1 advisory.
Packagist/filament/filament CVE-2026-77567: high 8.1, EPSS 0.55%
Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled
Action: Upgrade filament/filament to 4.12.0 or later.
composer require filament/filament:4.12.0composer require filament/filament:5.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.12.0 | - |
| 5.0.0 | 5.7.0 | - |
Fixed versions
| 4.12.0 | 5.7.0 |
Sources
- osv: GHSA-52xp-w8hr-xv3c
- https://github.com/filamentphp/filament/security/advisories/GHSA-52xp-w8hr-xv3c
- https://nvd.nist.gov/vuln/detail/CVE-2026-77567
- https://github.com/filamentphp/filament/commit/45534a6f87f50ac6df3b43680bb33f8da9ef207b
- https://github.com/filamentphp/filament
- https://github.com/filamentphp/filament/releases/tag/v4.12.0
- https://github.com/filamentphp/filament/releases/tag/v5.7.0
CVE-2026-77567 · published · modified · JSON