Critical Authentication Bypass Vulnerability in nest-admin (CVE-2026-117564)
A critical authentication bypass vulnerability (CVE-2026-117564) with a CVSS score of 9.8 affects nest-admin versions before 1.0.1. The vulnerability allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT secret, granting full administrative access. Immediate patching to version 1.0.1 or later is strongly recommended.