CVE-2026-58425

OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...

CVE-2026-58425 OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...

CVE-2026-58425

The Gitea application is vulnerable to an information disclosure flaw where OAuth token introspection returns metadata for tokens issued to other clients, violating RFC 7662 section 4 . This issue was addressed in Gitea v1.27.0 . Exploitation details are not provided in the documentation, but the...