DokuWiki 2025-05-14b Librarian inc/auth.php register password recovery

Summaryinfo

A vulnerability marked as critical has been reported in DokuWiki 2025-05-14b. Affected is the function register of the file inc/auth.php of the component Librarian. The manipulation leads to Remote Privilege Escalation. This vulnerability is uniquely identified as CVE-2026-37106. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability was found in DokuWiki 2025-05-14b. It has been rated as critical. This issue affects the function register of the file inc/auth.php of the component Librarian. The manipulation with an unknown input leads to a remote privilege escalation vulnerability. Using CWE to declare the problem leads to CWE-640. The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier because this is the intentional behavior when the product is configured for self-registration (a non-default feature). The supplier also notes that there is no configuration migration scenario that would result in the self-registration being enabled without the administrators knowledge.

The identification of this vulnerability is CVE-2026-37106 since 04/06/2026. The exploitation is known to be easy. The attack may be initiated remotely. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/17/2026). The attack technique deployed by this issue is T1552 according to MITRE ATT&CK.

By approaching the search of inurl:inc/auth.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Content Management System

Name

• DokuWiki

Version

• 2025-05-14b

License

• open-source

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion