Threats tagged 'brew-weaviate-cli-cve-2026-116672'

CVE-2026-116672 affects the Weaviate CLI's use of Authlib's implementation of RFC 7592 OAuth 2.0 Dynamic Client Registration Management Protocol. The provided example code for client authentication and permission checking omits a critical step: binding the registration access token to the specific client being accessed. This omission allows an attacker with any valid registration access token and knowledge of a client ID to bypass authorization controls and access or modify that client's registration. The vulnerability is present in versions >=3.0.2 and <3.4.2_1 and has been fixed in version 3.4.2_1.