oauth
1 live · 16 on record · last incident 9 days ago
Live1
- liveARTEX Threat actors use agentic AI framework ARTEX to abuse exposed secrets
Breaches & attacks · Exploited · since 5 Nov 2026 · updated 10 Nov 2026
Threat actors utilized the agentic offensive security framework ARTEX to scan GitHub for OAuth secrets. The compromised credentials were then used to execute authenticated actions within targeted organization tenants.
Do:Audit GitHub repositories for exposed OAuth secrets and monitor for unauthorized tenant access.
AI
Earlier15
- closedFastMCP GHSA-vqqp-x5qm-5qp4: FastMCP OAuth client provider issuer binding vulnerability
Patch now · Disclosed · since 23 Oct 2026
AI - closed6.5MCP SDKs CVE-2026-111769: MCP TypeScript client SDK leaked custom headers on cross-origin redirects
Patch now · Disclosed · since 20 Oct 2026 · updated 5 Nov 2026 · CVE-2026-111769
AI - closed5.4Open WebUI CVE-2026-109283: Authorization bypass in Open WebUI OAuth token exchange
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109283
AI - closed7.5MCP SDKs MCP TypeScript SDK OAuth Client Credential Exposure Vulnerability
Patch now · Disclosed · since 6 Oct 2026 · CVE-2026-104850
AI - closed8.3MCP servers & tools CVE-2026-77256: MCP Atlassian stores plaintext OAuth tokens insecurely
Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77256
AI - closed8.2MCP SDKs CVE-2026-63127: RMCP OAuth metadata validation flaw
Patch now · Disclosed · since 16 Sep 2026 · CVE-2026-63127
AI - closed6.8MCP servers & tools CVE-2026-55837: dbt-mcp OAuth helper exposes tokens without authentication
Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-55837
AI - closed6.5Open WebUI CVE-2026-88005: Open WebUI OAuth email domain allowlist bypass vulnerability
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-88005
AI - closed6.5Open WebUI CVE-2026-88006: Open WebUI OAuth role management bypass vulnerability
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-88006
AI - closed8.1Open WebUI CVE-2026-87016: Open WebUI OAuth Account Takeover via SQLite Wildcards
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87016
AI - closed8.1Open WebUI CVE-2026-70482: Open WebUI insecure OAuth token exchange vulnerability
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70482
AI - closed8.5Open WebUI CVE-2026-54008: Open WebUI Redirect-Bypass SSRF in OAuth Processing
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54008
AI - closed8.2Flowise CVE-2026-41273: Flowise OAuth 2.0 Access Token Disclosure
Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41273
AI - closed7.4FastMCP CVE-2025-69196: FastMCP OAuth Proxy Token Reuse
Patch now · Disclosed · since 16 Mar 2026 · CVE-2025-69196
AI - closed0.0Gradio CVE-2026-27167: Gradio Mocked OAuth Login Exposes Server Credentials
Patch now · Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-27167
AI