CVE-2025-45731: 2fauth

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending.

Affected products

• 2fauth 2fauth: version 5.4.3 only

Published 2025-07-24. Last modified 2026-06-17.