CVE-2026-123271

ChatCLI versions prior to v1.215.2 are vulnerable to an improper validation flaw in the MCP OAuth login flow . The application fails to verify that the server-supplied Protected Resource Metadata matches the configured server URL when used as a resource indicator. An attacker operating a maliciou...