CVE-2026-103957 | AWS Loom up to 1.6.x OAuth2 Discovery server-side request forgery

October 2, 2026 Yanac

A vulnerability identified as problematic has been detected in AWS Loom up to 1.6.x. Affected by this issue is some unknown functionality of the component OAuth2 Discovery Handler. Performing a manipulation results in server-side request forgery.

This vulnerability is known as CVE-2026-103957. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More