CVE-2021-38615: Eigentech Natural Language Processing

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to view and modify information.

Affected products

• Eigentech Natural Language Processing: version 3.10.1 only

Published 2021-09-07. Last modified 2026-06-17.