CVE-2023-53951: Gauzy Ever Gauzy

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.

Affected products

• Gauzy Ever Gauzy: version 0.281.9 only

Published 2025-12-19. Last modified 2026-06-17.