CVE-2026-108718

A flaw was found in Rill. The administrative Open Authorization OAuth server issues authorization codes to dynamically registered clients without requiring user consent. A remote attacker can exploit this flaw by tricking an authenticated user into opening a malicious authorization link, allowing...