CVE-2026-33124 | blakeblackshear frigate up to 0.16.x Password Reset password improper authentication

A vulnerability was found in blakeblackshear frigate up to 0.16.x. It has been declared as critical. The affected element is an unknown function of the file /users/{username}/password of the component Password Reset Handler. The manipulation results in improper authentication.

This vulnerability is known as CVE-2026-33124. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.