CVE-2026-123271 - ChatCLI before v1.215.2 Origin Validation Error via Unvalidated MCP OAuth Resource Indicator
CVE ID :CVE-2026-123271 Published : Nov. 5, 2026, 6:45 p.m. | 23 minutes ago Description :ChatCLI before v1.215.2 contains an improper validation vulnerability in the MCP OAuth login flow that uses server-supplied Protected Resource Metadata as the resource indicator without checking it...