CERT24CVE-2026-118573 — Critical authorization flaw in OAuth2 Token Manager enables access bypassLoading data…
CERT24Threat Observatory
Period

CVE-2026-118573 — Critical authorization flaw in OAuth2 Token Manager enables access bypass

The OAuth2 Token Manager module does not restrict access to its OAuth2 routes. This may allow an anonymous visitor to connect the site's integration to an account they control.

← Back to intelligence

CVE-2026-118573 — Critical authorization flaw in OAuth2 Token Manager enables access bypass

The OAuth2 Token Manager module does not restrict access to its OAuth2 routes. This may allow an anonymous visitor to connect the site's integration to an account they control.