Threats tagged 'brew-kimi-cli-cve-2026-114618'

Authlib's default implementation of the RFC 7523 JWT bearer grant does not properly validate the audience ('aud') claim in JWT assertions. Instead of verifying that the 'aud' claim matches the authorization server's token endpoint, it only checks for its presence. This allows an attacker with a valid JWT issued for any audience to use it against a different authorization server sharing the same signing key and obtain an access token improperly.