CVE-2026-31381

MEDIUM CVSS: 5.3 Published: 2026-03-20 Modified: 2026-06-17

Description

An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.

Affected Platforms

Gainsight Assist

Weakness Type

CWE-598, NVD-CWE-noinfo

References