CVE-2025-55306 — GenX_FX authentication bypass in JWT validation

CVE-2025-55306

GenX_FX authentication bypass in JWT validation PUBLISHED

Description (CNA)

GenX_FX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX FX backend where API keys and authentication tokens may be exposed if environment variables are misconfigured. Unauthorized users could gain access to cloud resources (Google Cloud, Firebase, GitHub, etc.).

Affected (CNA)

Vendor / product	Versions
Mouy-leng / GenX_FX	affected <= 1.0.0

CWE

CWE-522

References

https://github.com/Mouy-leng/GenX_FX/security/advisories/GHSA-2xjq-pvwj-mvm6

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.