CVE-2026-3432
Sim Studio AI - Unauthenticated OAuth Token Theft
Summary
Sim Studio AI - Unauthenticated OAuth Token Theft
Original description
The description as published by the source.
On SimStudio version below to 0.5.74, the /api/auth/oauth/token endpoint contains a code path that bypasses all authorization checks when provided with credentialAccountUserId and providerId parameters. An unauthenticated attacker can retrieve OAuth access tokens for any user by supplying their user ID and a provider name, effectively stealing credentials to third-party services.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web tenable.com