Skip to content
OpenAdvisories
High · 8.8 CVE-2026-12341 EUVD-2026-46064GHSA-7mfg-3gc5-q3w2

SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability

Published Jul 20, 2026 · Updated Jul 21, 2026 · Assigned by SailPoint

Description

This vulnerability
impacts all versions of IdentityIQ and allows an unauthenticated attacker
unauthorized access to protected APIs and data due to improper validation of
OAuth bearer tokens.

Affected products

VendorProductAffectedFixed
SailPoint Technologies IdentityIQ 8.5 – ≤ 8.5p1, 8.4 – ≤ 8.4p4, 8.3 – ≤ 8.3p5 —

References