CVE-2026-90712 | Gitlawb openclaude up to 0.30.0 xAI OAuth Callback xaiOAuthCallback.ts waitForCallback Error denial of service (Issue 2101)

A vulnerability identified as problematic has been detected in Gitlawb openclaude up to 0.30.0. Impacted is the function waitForCallback of the file src/services/api/xaiOAuthCallback.ts of the component xAI OAuth Callback Handler. The manipulation of the argument Error leads to denial of service.

This vulnerability is referenced as CVE-2026-90712. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More