Description
eLabFTW is an open source electronic lab notebook. In elabftw versions through 5.4.1, the login flow did not reliably preserve the multi-factor authentication state across authentication steps. Under certain conditions, an attacker with valid primary credentials could complete authentication with an attacker-controlled TOTP secret and bypass the additional factor. This could result in unauthorized account access. This issue is fixed in version 5.4.2.
Affected products
elabftw: elabftw
References2
- github.com/elabftw/elabftw/security/advisories/GHSA-x5wv-c9q4-f… MitigationVendor Advisory
- github.com/elabftw/elabftw/commit/8b7a575aef128870861187eaa2b2f… Patch
Metrics
- CVSS 3.1
-
5.9
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - EPSS — exploit probability
- 0% percentile: 17 · as of 13 November 2026
- CWE
- CWE-302
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.