CVE-2021-45379: Glewlwyd Project Glewlwyd

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password.

Affected products

• Glewlwyd Project Glewlwyd: from 2.0.0, before 2.6.1 (fixed in 2.6.1)

Published 2021-12-30. Last modified 2026-06-17.