Threats tagged 'brew-kimi-cli-cve-2026-41425'

Authlib's OAuth integration with Starlette clients has a cross-site request forgery (CSRF) vulnerability when using the cache parameter to store authentication state. This flaw allows attackers to trick victims into completing authorization flows initiated by the attacker. The issue affects specific versions of kimi-cli and related packages. A fix is available through system updates and Ubuntu Pro Extended Security Maintenance (ESM) packages.