CVE-2026-118669 - OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client
CVE ID :CVE-2026-118669 Published : Oct. 28, 2026, 10:17 p.m. | 2 hours, 7 minutes ago Description :OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and Resource Owner Password Credentials token grant handlers can...