CVE-2026-118669 | OAuthLib up to 3.x Token Grant improper authorization

October 29, 2026 Yanac

A vulnerability was found in OAuthLib up to 3.x. It has been declared as critical. Impacted is an unknown function of the component Token Grant Handler. Executing a manipulation can lead to improper authorization.

The identification of this vulnerability is CVE-2026-118669. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More