ThreatVectr
Tag

#JWT

2 stories taggedJWT.

A lone analyst sits in a darkened server room, face lit blue by a monitor displaying a sprawling interactive data map of cloud storage nodes and forgotten repos
Cloud Security

Researchers pull a login token out of Cloudflare's edge with a browser-era ghost bug

A Spectre-style side-channel attack ran inside one Cloudflare Worker and quietly read data from another sitting on the same machine, at speeds fast enough to lift a JSON Web Token in seconds.

4 min read
Full-frame photoreal editorial image of two identical brass keys resting on a dark steel surface under a single overhead light, each key tagged with a small bla
Identity & Access

n8n Login Bug Let a Valid Token From One Provider Log You In as Someone Else

The workflow automation platform matched users on a single ID field and ignored who issued the token. On Enterprise setups with more than one login provider, that was enough to walk in as another person.

3 min read
© 2026 Threat Vectr