CVE-2026-7018

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7018", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-25T10:32:08.296Z", "datePublished": "2026-04-26T03:30:20.576Z", "dateUpdated": "2026-04-27T17:02:44.468Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-26T03:30:20.576Z"}, "title": "Datavane Datavines JWT Token TokenManager.java hard-coded key", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-321", "lang": "en", "description": "Use of Hard-coded Cryptographic Key"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-320", "lang": "en", "description": "Key Management Error"}]}], "affected": [{"vendor": "Datavane", "product": "Datavines", "versions": [{"version": "13607645e14a4982468cfdbcf75c85cde63bae71", "status": "affected"}], "modules": ["JWT Token Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the argument tokenSecret can lead to use of hard-coded cryptographic key\r . The attack can be executed remotely. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This patch is called e540d6dc04e2e6ad11907fb655f3728a13e7b939. It is advisable to implement a patch to correct this issue. The project was informed of the problem early through a pull request but has not reacted yet."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.3, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.6, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.6, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5.1, "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-04-25T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-25T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-25T12:37:25.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "anch0r (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/359597", "name": "VDB-359597 | Datavane Datavines JWT Token TokenManager.java hard-coded key", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/359597/cti", "name": "VDB-359597 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/797305", "name": "Submit #797305 | datavane datavanes <= 1.0.0-SNAPSHOT Improper Authentication", "tags": ["third-party-advisory"]}, {"url": "https://github.com/datavane/datavines/issues/580", "tags": ["issue-tracking"]}, {"url": "https://github.com/datavane/datavines/pull/579", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/datavane/datavines/issues/580#issue-4206839649", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/datavane/datavines/pull/579/changes/e540d6dc04e2e6ad11907fb655f3728a13e7b939", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/datavane/datavines/", "tags": ["product"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-27T17:02:13.330526Z", "id": "CVE-2026-7018", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-27T17:02:44.468Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Datavane Datavines JWT Token TokenManager.java hard-coded key", "credits": [{"lang": "en", "type": "reporter", "value": "anch0r (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5.1, "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"vendor": "Datavane", "modules": ["JWT Token Handler"], "product": "Datavines", "versions": [{"status": "affected", "version": "13607645e14a4982468cfdbcf75c85cde63bae71"}]}], "timeline": [{"lang": "en", "time": "2026-04-25T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-25T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-25T12:37:25.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/359597", "name": "VDB-359597 | Datavane Datavines JWT Token TokenManager.java hard-coded key", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/359597/cti", "name": "VDB-359597 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/797305", "name": "Submit #797305 | datavane datavanes <= 1.0.0-SNAPSHOT Improper Authentication", "tags": ["third-party-advisory"]}, {"url": "https://github.com/datavane/datavines/issues/580", "tags": ["issue-tracking"]}, {"url": "https://github.com/datavane/datavines/pull/579", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/datavane/datavines/issues/580#issue-4206839649", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/datavane/datavines/pull/579/changes/e540d6dc04e2e6ad11907fb655f3728a13e7b939", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/datavane/datavines/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the argument tokenSecret can lead to use of hard-coded cryptographic key\r . The attack can be executed remotely. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This patch is called e540d6dc04e2e6ad11907fb655f3728a13e7b939. It is advisable to implement a patch to correct this issue. The project was informed of the problem early through a pull request but has not reacted yet."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-321", "description": "Use of Hard-coded Cryptographic Key"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-320", "description": "Key Management Error"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-26T03:30:20.576Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-7018", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-27T17:02:13.330526Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-04-27T17:02:31.518Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-7018", "state": "PUBLISHED", "dateUpdated": "2026-04-26T03:30:20.576Z", "dateReserved": "2026-04-25T10:32:08.296Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-26T03:30:20.576Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["JWT Token Handler"], "product": "Datavines", "vendor": "Datavane", "versions": [{"status": "affected", "version": "13607645e14a4982468cfdbcf75c85cde63bae71"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the argument tokenSecret can lead to use of hard-coded cryptographic key\r . The attack can be executed remotely. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This patch is called e540d6dc04e2e6ad11907fb655f3728a13e7b939. It is advisable to implement a patch to correct this issue. The project was informed of the problem early through a pull request but has not reacted yet."}, {"lang": "es", "value": "Se determin\u00f3 una vulnerabilidad en Datavane Datavines hasta 13607645e14a4982468cfdbcf75c85cde63bae71. El elemento afectado es una funci\u00f3n desconocida del archivo datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java del componente Gestor de Tokens JWT. La ejecuci\u00f3n de una manipulaci\u00f3n del argumento tokenSecret puede llevar al uso de una clave criptogr\u00e1fica codificada de forma r\u00edgida. El ataque puede ejecutarse de forma remota. El ataque requiere un alto nivel de complejidad. La explotabilidad se describe como dif\u00edcil. El exploit ha sido divulgado p\u00fablicamente y puede ser utilizado. Este producto implementa un modelo de lanzamiento continuo para la entrega constante, lo que significa que la informaci\u00f3n de la versi\u00f3n para las versiones afectadas o actualizadas no est\u00e1 disponible. Este parche se denomina e540d6dc04e2e6ad11907fb655f3728a13e7b939. Es aconsejable implementar un parche para corregir este problema. El proyecto fue informado del problema con antelaci\u00f3n a trav\u00e9s de una solicitud de extracci\u00f3n, pero a\u00fan no ha reaccionado."}], "id": "CVE-2026-7018", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-7018", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-27T17:02:13.330526Z", "version": "2.0.3"}}]}, "published": "2026-04-26T04:16:09.110", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/datavane/datavines/"}, {"source": "cna@vuldb.com", "url": "https://github.com/datavane/datavines/issues/580"}, {"source": "cna@vuldb.com", "url": "https://github.com/datavane/datavines/issues/580#issue-4206839649"}, {"source": "cna@vuldb.com", "url": "https://github.com/datavane/datavines/pull/579"}, {"source": "cna@vuldb.com", "url": "https://github.com/datavane/datavines/pull/579/changes/e540d6dc04e2e6ad11907fb655f3728a13e7b939"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/797305"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/359597"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/359597/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-320"}, {"lang": "en", "value": "CWE-321"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "13607645e14a4982468cfdbcf75c85cde63bae71"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "datavines", "vendor": "datavane"}], "analysis": {"en": {"generated_at": "2026-04-28T05:25:02.705014+00:00", "value": {"mitigation_remediation": ["Apply the patch commit e540d6dc04e2e6ad11907fb655f3728a13e7b939 to fix the hard\u2011coded key handling.", "Upgrade to a newer release of Datavines that incorporates the patch, or merge the change into your local fork if a release is not yet available.", "Ensure that tokenSecret values are validated and not overridden by potentially malicious input; enforce strict configuration management."], "summary": {"action": "Patch", "impact": "Confidentiality compromise"}, "threat_synthesis": {"affected_systems": "Datavane Datavines up to commit 13607645e14a4982468cfdbcf75c85cde63bae71 is affected. No specific version list is available because the project uses a rolling release model.", "description_and_impact": "The vulnerability in Datavane Datavines allows an attacker to manipulate the tokenSecret argument within the JWT token handler, causing the application to use a hard\u2011coded cryptographic key. This flaw represents a weakness in key management (CWE-320 and CWE-321) that can enable unauthorized decryption or generation of tokens, potentially exposing sensitive information and granting elevated privileges to the attacker. The impact is a loss of confidentiality and possible unauthorized access.", "risk_and_exploitability": "The CVSS score of 6.3 indicates a moderate severity, while the EPSS score of less than 1% points to a very low likelihood of exploitation. The attack vector is remote, but the complexity and difficulty of exploitation are high, and the vulnerability is not currently listed in the CISA KEV catalog. Attackers would need to craft a payload that modifies tokenSecret and trigger the vulnerable code path, which is difficult and not straightforward."}}}}, "created": "2026-04-27T20:20:28.745348+00:00", "updated": "2026-04-28T05:30:23.357457+00:00", "vendors": ["datavane", "datavane$PRODUCT$datavines"]}