CVE-2026-9094 | Casdoor up to 2.362.0 Organization object/token_oauth.go GetTokenExchangeToken access control

SecurityVulns
Yanac

A vulnerability has been found in Casdoor up to 2.362.0 and classified as critical. Affected by this vulnerability is the function GetTokenExchangeToken of the file object/token_oauth.go of the component Organization Handler. This manipulation causes improper access controls.

This vulnerability is tracked as CVE-2026-9094. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More