🚨 Critical auth bypass in #Laravel's token API guard (CVSS 9.2): on #MySQL and #MariaDB, an unauthenticated attacker could log in as an existing user without knowing their API token #PHP #infosec
🔍 The bug sits in Illuminate\Auth\TokenGuard, the class behind the "token" guard driver. A crafted non-string credential slipped past the guard and made the lookup query match an unintended user record instead of failing authentication
🧵👇