Cal.com is open-source scheduling software. From 3.1.6 to before 6.0.7, there is a vulnerability in a custom NextAuth JWT callback that allows attackers to gain full authenticated access to any user's account by supplying a target email address via session.update(). This vulnerability is fixed in 6.0.7.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 13 Jan 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Cal.com is open-source scheduling software. From 3.1.6 to before 6.0.7, there is a vulnerability in a custom NextAuth JWT callback that allows attackers to gain full authenticated access to any user's account by supplying a target email address via session.update(). This vulnerability is fixed in 6.0.7. | |
| Title | Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback | |
| Weaknesses | CWE-602 CWE-639 |
|
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2026-01-13T21:37:35.541Z
Reserved: 2026-01-13T15:47:41.627Z
Link: CVE-2026-23478
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-01-13T22:16:08.093
Modified: 2026-01-13T22:16:08.093
Link: CVE-2026-23478
Redhat
No data.
OpenCVE Enrichment
No data.