CVE-2026-61397

Apache CloudStack is affected by an OAuth2 Token Cross-Request Leak in its OAuth2 authentication plugin and Google OAuth integration, classified as Exposure of Sensitive Information to an Unauthorized Actor . The vulnerability allows sensitive OAuth2 tokens to leak across requests, potentially ex...