AIKIDO-2026-563088
vertx-web is vulnerable to Authorization Bypass
81
CVE Score
High
Authorization Bypass
TL;DR
ChainAuthHandler in vertx-web skips withScope and withScopes checks when an earlier handler has already authenticated the user. That happens for both any() and all() chains, so a token that is valid but missing the required scope still reaches the route. The fix runs the scope checks during authentication and keeps them when the chain continues from an earlier handler.
How do I fix this?
Upgrade the io.vertx:vertx-web library to the patch version.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and a route uses ChainAuthHandler scope checks after another handler has already authenticated the user.
Package
Versions
4.0.0 - 4.5.34
Fixed in 4.5.355.0.0 - 5.1.8
Fixed in 5.1.105.2.0 - 5.2.0
Fixed in 5.2.1Background info
vertx-web is vulnerable to Authorization Bypass in versions 4.0.0 - 4.5.34, 5.0.0 - 5.1.8 and 5.2.0 - 5.2.0.
Links
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.