Skip to content
OpenAdvisories

Product · IBM

Bob

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2026-5514

    IBM Bob is vulnerable to unauthorized session token exposure due to improper handling of authentication provider session information

    IBM Bob 2.0.3 allows unauthorized extensions to retrieve session tokens via the authentication provider API. The token is exposed in the account identifier field during account enumeration, without requiring explicit user consent. This may allow malicious ext…

    IBM Bob