JWT

Everything BlueTeam Insider has reported about JWT: 3 stories, newest first. Part of our Vulnerabilities coverage.

IBM MCP Context Forge Hardcoded Secret Before 1.0.2 Enables Full Platform Control Without Credentials

BlueTeam InsiderOct 13, 2026

A hardcoded secret in IBM MCP Context Forge versions before 1.0.2 enables remote attackers to forge administrative tokens, granting full platform control without valid credentials.

Vulnerabilities

BotSharp Authentication Bypass via Hardcoded JWT Key Exposes Admin Access

BlueTeam InsiderOct 11, 2026

A critical flaw in BotSharp 5.2.0 allows attackers to forge tokens using a hardcoded secret, granting full administrative control without credentials.

Vulnerabilities

fast-jwt CVE-2026-107723 Bypasses Claim Checks via Array Payloads

BlueTeam InsiderOct 9, 2026

A high-severity flaw in the popular Node.js library allows attackers to skip expiry, issuer, and audience validation by submitting tokens with array payloads.