Connect 1password Connect

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in 1password Connect.

By the Year

In 2026 there have been 0 vulnerabilities in 1password Connect. Connect did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2026 0 0.00
2025 0 0.00
2024 0 0.00
2023 0 0.00
2022 1 4.80
2021 1 5.40

It may take a day or so for new Connect vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent 1password Connect Security Vulnerabilities

An issue was discovered in AgileBits 1Password
CVE-2022-32550 4.8 - Medium - June 15, 2022

An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with the 1Password service.

1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens
CVE-2021-36758 5.4 - Medium - July 16, 2021

1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens that can be used to perform privilege escalation. Malicious users authorized to create Secrets Automation access tokens can create tokens that have access beyond what the user is authorized to access, but limited to the existing authorizations of the Secret Automation the token is created in.

Improper Input Validation

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for 1password Connect or by 1password? Click the Watch button to subscribe.

1password
Vendor

subscribe