CVE-2026-73610: Jwt Static Subject Claim In Account Loop
JWT claim 'sub' is assigned a constant or static variable instead of the account user identifier during token generation inside an account loop. This causes all generated tokens to share the same subject identity.
Gogreprules fetch cve-2026-73610-jwt-static-subject-claim-in-account-loop --engine opengrepDescription
JWT claim 'sub' is assigned a constant or static variable instead of the account user identifier during token generation inside an account loop. This causes all generated tokens to share the same subject identity.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.