NewsOct 20, 2026Laravel News
Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68
A critical auth bypass in Laravel's token API guard let attackers log in as other users on MySQL and MariaDB. Update to 12.68.0 or 13.29.0. The post Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this directly in your inbox.
summary
Article summary
A critical auth bypass in Laravel's token API guard let attackers log in as other users on MySQL and MariaDB. Update to 12.68.0 or 13.29.0. The post Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this directly in your inbox.
details
Article details
- Source
- Laravel News
- Published
- Oct 20, 2026
- Added to index
- Oct 20, 2026
topics
laravel