CVE-2021-26905: 1password Scim Bridge

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key.

Affected products

• 1password Scim Bridge: from 1.0.0, before 1.6.2 (fixed in 1.6.2)

Published 2021-02-08. Last modified 2026-06-17.