CVE-2026-123271

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 6, 2026

Last Seen

November 6, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Medium-Likelihood OAuth Vulnerability in ChatCLI Exposes Bearer Tokens49.5

ChatCLI versions before 1.215.2 contain a vulnerability (CVE-2026-123271) in the OAuth login flow that allows a malicious MCP server to exploit improper validation of resource metadata. This flaw can lead to unauthorized access by enabling an attacker to replay bearer tokens against different resour...