{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-123271", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-11-05T18:19:12.338Z", "datePublished": "2026-11-05T18:45:35.481Z", "dateUpdated": "2026-11-05T18:45:35.481Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-05T18:45:35.481Z"}, "datePublic": "2026-10-11T00:00:00.000Z", "title": "ChatCLI before v1.215.2 Origin Validation Error via Unvalidated MCP OAuth Resource Indicator", "descriptions": [{"lang": "en", "value": "ChatCLI before v1.215.2 contains an improper validation vulnerability in the MCP OAuth login flow that uses server-supplied Protected Resource Metadata as the resource indicator without checking it matches the configured server URL. A malicious MCP server can declare another resource on the same authorization server, obtain the user's bearer token for it, and replay that token against the other resource."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Origin Validation Error", "cweId": "CWE-346", "type": "CWE"}]}], "affected": [{"vendor": "diillson", "product": "ChatCLI", "defaultStatus": "unaffected", "versions": [{"version": "v1.159.0", "lessThan": "v1.215.2", "status": "affected", "versionType": "semver"}], "packageURL": "pkg:golang/github.com/diillson/chatcli", "repo": "https://github.com/diillson/chatcli"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "baseScore": 5.1, "baseSeverity": "MEDIUM"}}, {"format": "CVSS", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseScore": 8, "baseSeverity": "HIGH"}}], "references": [{"url": "https://github.com/diillson/chatcli/security/advisories/GHSA-95vg-3r9c-2v5q", "tags": ["vendor-advisory"], "name": "GitHub Security Advisory (GHSA-95vg-3r9c-2v5q)"}, {"url": "https://github.com/diillson/chatcli/commit/951fe24b8e090eae86bf8edb13a788916b1e6c91", "tags": ["patch"]}, {"url": "https://github.com/diillson/chatcli/releases/tag/v1.215.2", "tags": ["release-notes"], "name": "ChatCLI v1.215.2 Release Notes"}, {"url": "https://github.com/diillson/chatcli/blob/359eb27debc4de78289a9662551a51ab4528e16c/cli/mcp/oauth.go#L477-L493", "tags": ["technical-description"]}, {"name": "VulnCheck Advisory: ChatCLI before v1.215.2 Origin Validation Error via Unvalidated MCP OAuth Resource Indicator", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/chatcli-before-1.215.2-origin-validation-error-via-unvalidated-mcp-oauth-resource-indicator"}], "credits": [{"lang": "en", "value": "Theodoros Lampropoulos", "type": "finder"}, {"lang": "en", "value": "diillson", "type": "remediation developer"}], "x_generator": {"engine": "vulncheck-endgame"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:golang/github.com/diillson/chatcli", "product": "ChatCLI", "repo": "https://github.com/diillson/chatcli", "vendor": "diillson", "versions": [{"lessThan": "v1.215.2", "status": "affected", "version": "v1.159.0", "versionType": "semver"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ChatCLI before v1.215.2 contains an improper validation vulnerability in the MCP OAuth login flow that uses server-supplied Protected Resource Metadata as the resource indicator without checking it matches the configured server URL. A malicious MCP server can declare another resource on the same authorization server, obtain the user's bearer token for it, and replay that token against the other resource."}], "id": "CVE-2026-123271", "lastModified": "2026-11-05T19:17:20.543", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.8, "source": "[email protected]", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "[email protected]", "type": "Secondary"}]}, "published": "2026-11-05T19:17:20.543", "references": [{"source": "[email protected]", "url": "https://github.com/diillson/chatcli/blob/359eb27debc4de78289a9662551a51ab4528e16c/cli/mcp/oauth.go#L477-L493"}, {"source": "[email protected]", "url": "https://github.com/diillson/chatcli/commit/951fe24b8e090eae86bf8edb13a788916b1e6c91"}, {"source": "[email protected]", "url": "https://github.com/diillson/chatcli/releases/tag/v1.215.2"}, {"source": "[email protected]", "url": "https://github.com/diillson/chatcli/security/advisories/GHSA-95vg-3r9c-2v5q"}, {"source": "[email protected]", "url": "https://www.vulncheck.com/advisories/chatcli-before-1.215.2-origin-validation-error-via-unvalidated-mcp-oauth-resource-indicator"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-346"}], "source": "[email protected]", "type": "Primary"}]}

{"bugzilla": {"description": "github.com/diillson/chatcli: ChatCLI: Unauthorized access via unvalidated MCP OAuth resource indicator", "id": "2567523", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567523"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.0", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-346", "details": ["A flaw was found in ChatCLI. During the Model Context Protocol (MCP) Open Authorization (OAuth) login process, the application does not verify whether server-supplied resource metadata matches the configured server URL. A malicious MCP server can exploit this issue by specifying a different resource hosted on the same authorization server, allowing it to capture the user's bearer authentication token and replay it to gain unauthorized access to that secondary resource."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-123271", "public_date": "2026-11-05T18:45:35Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-123271\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-123271\nhttps://github.com/diillson/chatcli/blob/359eb27debc4de78289a9662551a51ab4528e16c/cli/mcp/oauth.go#L477-L493\nhttps://github.com/diillson/chatcli/commit/951fe24b8e090eae86bf8edb13a788916b1e6c91\nhttps://github.com/diillson/chatcli/releases/tag/v1.215.2\nhttps://github.com/diillson/chatcli/security/advisories/GHSA-95vg-3r9c-2v5q\nhttps://www.vulncheck.com/advisories/chatcli-before-1.215.2-origin-validation-error-via-unvalidated-mcp-oauth-resource-indicator"], "statement": "This vulnerability is rated as Important severity because an attacker operating a rogue MCP server can induce the client to forward authentication tokens intended for other protected services sharing the same identity provider, leading to cross-service credential theft. Exploitation requires user interaction to connect to an untrusted endpoint, and ChatCLI is not included in standard Red Hat Enterprise Linux package repositories. The risk is limited to developer workstations where external, unverified Model Context Protocol servers are manually configured.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[v1.159.0,v1.215.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "ChatCLI", "source": "cna", "vendor": "diillson"}, "product": "chatcli", "vendor": "diillson"}], "created": "2026-11-05T20:45:07.262595+00:00", "updated": "2026-11-06T16:35:19.526903+00:00", "vendors": ["diillson", "diillson$PRODUCT$chatcli"]}