CVE-2026-105770 | octo-sts Octo STS up to 0.11.1 TrustPolicy TrustPolicy.CheckToken information disclosure

A vulnerability classified as problematic was found in octo-sts Octo STS up to 0.11.1. The affected element is the function TrustPolicy.CheckToken of the component TrustPolicy. Executing a manipulation can lead to information disclosure.

This vulnerability is registered as CVE-2026-105770. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More