CVE-2023-53951 CRITICAL

CVE-2023-53951: Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret

Vendor Gauzy
Product ever gauzy
Weakness CWE-347
Published December 19, 2025
Last update April 7, 2026
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.

Key dates

02Disclosure timeline

December 19, 2025 CVE published
April 7, 2026 Record updated