CVE-2026-27898 | dani-garcia vaultwarden up to 1.35.3 Standard Retrieval API partial authorization (GHSA-w9f8-m526-h7fh)

A vulnerability marked as critical has been reported in dani-garcia vaultwarden up to 1.35.3. This impacts an unknown function of the file /api/ciphers/{id}/partial of the component Standard Retrieval API. The manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-27898. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.