Simple Admin Core Authentication Bypass Allows Forging Super Admin Tokens

Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens.

The issue is a hard-coded Auth.AccessSecret in api/etc/core.yaml. Attackers can sign a JWT with the public secret and the roleId claim 001 to gain full administrative control.

• Affected versions: through 1.8.7
• Attackers can control users, roles, menus, API authorities, configuration, and tokens
• No authentication required