Skip to content
Threat Feed
Subscribe

Vendor

ChatCLI

1 brief RSS
high advisory

ChatCLI: Improper validation in MCP OAuth login flow (CVE-2026-123271)

ChatCLI versions prior to 1.215.2 are vulnerable to token theft and replay attacks because the application fails to validate Protected Resource Metadata during the MCP OAuth login flow.

ChatCLI
1t 1c