CVE-2026-123271 | diillson ChatCLI up to 1.215.1 MCP OAuth Login Flow improper authorization

November 5, 2026 Yanac

A vulnerability was found in diillson ChatCLI up to 1.215.1. It has been classified as critical. The impacted element is an unknown function of the component MCP OAuth Login Flow. Performing a manipulation results in improper authorization.

This vulnerability is known as CVE-2026-123271. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More