Critical Authentication Bypass Vulnerability in BotSharp (CVE-2026-108860)
A critical authentication bypass vulnerability (CVE-2026-108860) with a CVSS score of 9.1 affects BotSharp versions up to 5.2.0. The vulnerability allows unauthenticated remote attackers to forge bearer tokens using a hard-coded JWT signing key, enabling impersonation of any user, including administrators. Immediate patching or mitigation is recommended to prevent potential exploitation.