Skip to content
OpenAdvisories

Product · Rill Data

rill

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-108718

    Rill 0.77.0 through 0.90.5 OAuth Missing Authorization via Dynamic Client Registration

    Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user consent. Attackers can register a client with the long_lived_access_token scope …

    Rill Data rill