CVE-2026-73085: Advplyr Audiobookshelf

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/TokenManager.js treats JWTs with the refresh token type as bearer access tokens on API and WebSocket resource endpoints such as /api/me instead of restricting them to /auth/refresh, allowing refresh tokens to authenticate as the associated users. This issue is fixed in version 2.36.0.

Affected products

• Advplyr Audiobookshelf: before 2.36.0 (fixed in 2.36.0)

Published 2026-08-11. Last modified 2026-09-09.