CVE-2026-79786 - Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation, allowing attackers to register clients pointing to attacker-controlled hosts. Attackers can send authorization URLs to signed-in users, capture their authorization codes upon consent approval, and exchange them for access tokens to hijack MCP sessions. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-82274 [中危] CVE-2026-82274 - Twenty through 2.35.0 contains an open redirect vulne…
• CVE-2026-55834 [中危] CVE-2026-55834 - Pocket ID is an OIDC provider that allows users to au…
• CVE-2026-59355 [中危] CVE-2026-59355 - In versions of Spring Authorization Server 1.5.0 thro…
• CVE-2026-47887 [中危] CVE-2026-47887 - A Spring MVC application that uses UrlFileNameViewCon…
• CVE-2026-47883 [中危] CVE-2026-47883 - UrlHandlerFilter can be vulnerable to an open redirec…
• CVE-2026-81036 [高危] CVE-2026-81036 - Stalwart Mail Server does not compare an OAuth redire…
• CVE-2026-80200 [中危] CVE-2026-80200 - Kimai before 2.53.0 contains an open redirect vulnera…
• CVE-2026-79786 [高危] CVE-2026-79786 - Coroot's unauthenticated MCP OAuth dynamic client reg…