CVE-2026-88819

Siglet (current and all past versions) contains a vulnerability in its refresh token handler , which does not enforce proof of possession of the issuer DID. This lack of enforcement means an attacker could potentially use a refresh token without demonstrating control over the associated decentral...