# Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui

Source: https://junglewise.ai/threats/authentication-bypass-using-an-alternate-path-or-channel-and-21e351b6  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2021-10-22  
License: CC BY 4.0 with a link back

Severity: info · Published 2021-10-22

Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui

Technologies: [rucio-webui (PyPI)](https://junglewise.ai/threats/technologies/rucio-webui). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** Informational severity, published 22 October 2021.

**Which products and versions are affected?** rucio-webui (PyPI) ECOSYSTEM:introduced=1.26.0,fixed=1.26.7.

**Is there a fix for This vulnerability?** Yes. rucio-webui (PyPI): upgrade to 1.26.7 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**Am I affected?** Check whether you run rucio-webui (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- rucio-webui (PyPI): upgrade to 1.26.7 or later

  ```sh
  pip install "rucio-webui>=1.26.7"
  ```


## Affected products

- rucio-webui (PyPI) ECOSYSTEM:introduced=1.26.0,fixed=1.26.7

## Related threats

- [PYSEC-2026-3055 - Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute](https://junglewise.ai/threats/cve-2026-25736-rucio-webui-has-a-stored-cross-site-scripting-xss-vulnerability)
- [PYSEC-2026-3054 - Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name](https://junglewise.ai/threats/cve-2026-25735-rucio-webui-has-a-stored-cross-site-scripting-xss-vulnerability)
- [PYSEC-2026-3057 - Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata](https://junglewise.ai/threats/cve-2026-25734-rucio-webui-has-stored-cross-site-scripting-xss-in-rse-metadata)
- [PYSEC-2026-3058 - Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function](https://junglewise.ai/threats/cve-2026-25733-rucio-webui-vulnerable-to-stored-cross-site-scripting-xss-through)
- [PYSEC-2026-3053 - Rucio WebUI has Username Enumeration via Login Error Message](https://junglewise.ai/threats/cve-2026-25138-rucio-webui-username-enumeration-via-login-error-message)