CVE-2026-33875: Authentication Hijacking in Gematik Authenticator

The impact of this vulnerability is severe. An attacker can craft a malicious deep link that, when clicked by a victim, allows the attacker to authenticate as that user. This grants the attacker access to any applications or services protected by Gematik Authenticator, potentially exposing sensitive health data, financial information, or enabling unauthorized actions within healthcare systems. The attacker essentially steals the victim's identity within the authentication context. This is particularly concerning given the sensitive nature of healthcare applications and the potential for widespread impact if exploited.

1. Reserved2026-03-24
2. Published2026-03-27
3. Modified2026-04-03
4. EPSS updated2026-04-04

The primary mitigation for CVE-2026-33875 is to immediately update Gematik Authenticator to version 4.16.0 or greater. Due to the nature of the vulnerability, there are no known workarounds beyond upgrading. Users should be educated about the risks of clicking on untrusted deep links and verifying the source of any links before clicking. Administrators of healthcare systems using Gematik Authenticator should proactively monitor for suspicious authentication activity and consider implementing multi-factor authentication where possible to add an additional layer of security.