{"id":"CVE-2026-119420","kind":"vulnerability","aliases":["CVE-2026-119420"],"related":[],"title":"Lago: invite flow lets org admins take over existing user accounts","description":"Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session tokens for existing accounts via the acceptInvite mutation without a password check. Attackers can invite a victim's email, accept with an arbitrary password, and receive a JWT to access the victim's organizations, billing data, API keys and payment integrations.","summary":"Lago, an open-source billing platform, lets an organization administrator invite an existing user's email and then accept the invite with an arbitrary password through the acceptInvite mutation, with no password check. The attacker receives a JWT for the victim's account, giving access to the victim's organizations, billing data, API keys and payment integrations.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["billing","lago","other","self-hosted"],"not_affected_if":["version-above-1.55.0"],"how_to_check":"- Confirm whether you run Lago and which version: `unknown` version command in the sources\n- Check that the running version is above `1.55.0`, the last version the sources list as affected","fix":"- Lago through `1.55.0`: the sources do not name a fixed version","status":"open","published_at":"2026-10-30T12:16:38+00:00","first_seen_at":"2026-10-30T12:30:25+00:00","triaged_at":"2026-10-30T12:31:56+00:00","updated_at":"2026-10-30T12:31:56+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-30T12:31:56Z","model":"claude-haiku-5-5","output":{"fix":"- Lago through `1.55.0`: the sources do not name a fixed version\n- unknown otherwise","reach":"network","title":"Lago: invite flow lets org admins take over existing user accounts","impact":"high","summary":"Lago, an open-source billing platform, lets an organization administrator invite an existing user's email and then accept the invite with an arbitrary password through the acceptInvite mutation, with no password check. The attacker receives a JWT for the victim's account, giving access to the victim's organizations, billing data, API keys and payment integrations.","audience":"businesses","category":"other","nicknames":[],"who_cares":["lago","self-hosted","billing"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker takes over victim accounts, reading billing data and API keys","analyst_note":"Check the NVD entry and the Lago release notes for a fixed version and whether the flaw needs any non-default setting.","how_to_check":"- Confirm whether you run Lago and which version: `unknown` version command in the sources\n- Check that the running version is above `1.55.0`, the last version the sources list as affected","plain_action":"","needs_analyst":true,"not_affected_if":["version-above-1.55.0"],"who_is_affected":"Self-hosted or managed deployments of Lago through version 1.55.0 are exposed to any organization administrator who can send invites. The sources do not say whether a non-admin user or an unauthenticated attacker can reach the same path. Teams that do not run Lago can skip this.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000699,"input_tokens":4140,"output_tokens":569,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-119420':14A,17A '-2026':13A,16A '1.55.0':84C 'accept':43B,116C 'acceptinvit':52B,103C 'access':69B,126C 'account':11A,67B,100C 'admin':6A 'administr':34B,93C 'allow':91C 'api':77B,133C 'arbitrari':48B,119C 'attack':59B,109C 'authent':87C 'bill':18B,29B,75B,131C 'bypass':88C 'check':57B,108C 'contain':85C 'cve':12A,15A 'data':76B,132C 'email':40B,115C 'exist':9A,37B,99C 'flow':3A 'give':68B 'host':23B 'integr':81B,137C 'invit':2A,35B,45B,111C 'jwt':62B,124C 'key':78B,134C 'lago':1A,19B,24B,82C 'let':4A,31B 'mutat':53B,104C 'obtain':95C 'open':27B 'open-sourc':26B 'org':5A 'organ':33B,74B,92C,130C 'password':49B,56B,107C,120C 'payment':80B,136C 'platform':30B 'receiv':60B,122C 'self':22B 'self-host':21B 'session':96C 'sourc':28B 'take':7A 'token':97C 'user':10A,38B 'via':101C 'victim':65B,72B,113C,128C 'vulner':89C 'without':105C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted or managed deployments of Lago through version 1.55.0 are exposed to any organization administrator who can send invites. The sources do not say whether a non-admin user or an unauthenticated attacker can reach the same path. Teams that do not run Lago can skip this.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T12:16:38+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119420","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119420","severity":null,"published_at":"2026-10-30T12:16:38+00:00","modified_at":"2026-10-30T12:16:38+00:00","first_seen_at":"2026-10-30T12:30:25+00:00","fetched_at":"2026-10-30T12:30:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}