HIGH7.5
PYSEC-2026-1705
NiceGUI On Air authentication issue
Quick fix
PYSEC-2026-1705 — nicegui: upgrade to the fixed version with the command below.
pip install --upgrade 'nicegui>=2.9.1'Details
### Summary Once a user logins to one browser, all other browsers are logged in without entering password. Even incognito mode.
### Impact high
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/zauberzeug/nicegui/security/advisories/GHSA-v6jv-p6r8-j78w[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2025-21618[ADVISORY]
- https://github.com/zauberzeug/nicegui/commit/1621a4ba6a06676b8094362d36623551e651adc1[WEB]
- https://github.com/zauberzeug/nicegui[PACKAGE]
- https://pypi.org/project/nicegui[PACKAGE]
- https://github.com/advisories/GHSA-v6jv-p6r8-j78w[ADVISORY]