CVE-2021-38617: Eigentech Natural Language Processing

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privilege escalation.

Affected products

• Eigentech Natural Language Processing: version 3.10.1 only

Published 2021-09-07. Last modified 2026-06-17.