← Database

CVE-2026-55982

CRITICAL CVSS: 9.1 Published: 2026-08-13 Modified: 2026-08-14

Description

OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes

Affected Platforms

Unknown

Weakness Type

CWE-200

References