A vulnerability labeled as critical has been found in Nhost up to 1.40.x. This affects an unknown function. Executing a manipulation can lead to missing authentication.

This vulnerability is handled as CVE-2026-34200. It is possible to launch the attack on the local host. There is not any exploit available.

The affected component should be upgraded.