CVE-2025-55306

GenX_FX authentication bypass in JWT validation

State: Published
Severity: 9.8 Critical
Published: Aug 19, 2025
Updated: Aug 19, 2025
Reserved: Aug 12, 2025

Description

GenX_FX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX FX backend where API keys and authentication tokens may be exposed if environment variables are misconfigured. Unauthorized users could gain access to cloud resources (Google Cloud, Firebase, GitHub, etc.).

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	GitHub_M

Weaknesses

CWE-522 Insufficiently Protected Credentials

Affected Products

Product	Versions
GenX_FXMouy-leng	<= 1.0.0Affected

References

https://github.com/Mouy-leng/GenX_FX/security/advisories/GHSA-2xjq-pvwj-mvm6

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.