Skip to content
OpenAdvisories

Product · diillson

ChatCLI

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2026-123271

    ChatCLI before v1.215.2 Origin Validation Error via Unvalidated MCP OAuth Resource Indicator

    ChatCLI before v1.215.2 contains an improper validation vulnerability in the MCP OAuth login flow that uses server-supplied Protected Resource Metadata as the resource indicator without checking it matches the configured server URL. A malicious MCP server can…

    diillson ChatCLI