Threats tagged 'ghsa-2gm2-hpg7-78f2'

ChatCLI versions prior to 1.215.2 have an improper validation vulnerability in the MCP OAuth login flow. The vulnerability arises because the client uses server-supplied Protected Resource Metadata as the resource indicator without verifying it matches the configured server URL. This flaw allows a malicious MCP server to declare a different resource on the same authorization server, obtain the user's bearer token for that resource, and replay it against the other resource.