CVE-2026-3432
Sim Studio AI - Unauthenticated OAuth Token Theft
Résumé
Sim Studio AI - Unauthenticated OAuth Token Theft
Description d'origine
La description telle que publiée par la source (souvent en anglais).
On SimStudio version below to 0.5.74, the /api/auth/oauth/token endpoint contains a code path that bypasses all authorization checks when provided with credentialAccountUserId and providerId parameters. An unauthenticated attacker can retrieve OAuth access tokens for any user by supplying their user ID and a provider name, effectively stealing credentials to third-party services.
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web tenable.com