Back to news
NewsOct 20, 2026Laravel News

Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68

A critical auth bypass in Laravel's token API guard let attackers log in as other users on MySQL and MariaDB. Update to 12.68.0 or 13.29.0. The post Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this directly in your inbox.

summary

Article summary

A critical auth bypass in Laravel's token API guard let attackers log in as other users on MySQL and MariaDB. Update to 12.68.0 or 13.29.0. The post Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this directly in your inbox.

details

Article details

Source
Laravel News
Published
Oct 20, 2026
Added to index
Oct 20, 2026

topics

laravel

sources

Source links

Laravel News

publication

Open source