CVE-2026-121535 Details
Description
A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the function checkPassword of the file app/src/server.js of the component Room Action Handler. The manipulation results in improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. The exploit has been made public and could be used. Upgrading to version 2.1.38 is able to resolve this issue. The patch is identified as 55bec1d05f931d2e43633d6d0b7274f79ec719dd. Upgrading the affected component is advised.
A vulnerability exists in MiroTalk P2P versions through 2.0.87, specifically within the Room Action Handler's checkPassword function. This issue allows for improper rate limiting of authentication attempts, enabling remote password guessing attacks on locked rooms. The vulnerability arises because the checkPassword action can be exploited without joining the room or holding any specific role, creating an online password oracle that undermines room security.
Users are advised to upgrade to MiroTalk P2P version 2.1.38, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 3, 2026CISA-ADP
Assessed Nov 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/miroslavpejic85/mirotalk/commit/55bec1d05f931d2e43633d6d0b7274f79ec719dd | [email protected] | Source CodeVendor |
| https://github.com/miroslavpejic85/mirotalk/security/advisories/GHSA-x2r2-j5hf-hp36 | [email protected] | AdvisoryBroken LinkVendor |
| https://github.com/waterhunter2000-svg/vulnerability-reports | [email protected] | BundleTechnical Description |
| https://github.com/waterhunter2000-svg/vulnerability-reports/blob/main/04-mirotalk-checkpassword-oracle.md | [email protected] | ExploitTechnical Analysis |
| https://vuldb.com/cve/CVE-2026-121535 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1019995 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/430291 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/430291/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-307 | Improper Restriction of Excessive Authentication Attempts | [email protected] |
| CWE-799 | Improper Control of Interaction Frequency | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MiroTalk P2P | <= 2.0.87 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 4, 2026 | CVE Modified | CISA-ADP |
| Nov 3, 2026 | New CVE Received | [email protected] |