CVE-2026-48612
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow, resulting in a victim's account being linked to an attacker-controlled account.
Risk Assessment
This can lead to unauthorized account linking and potential account takeover.
Recommendation
It is recommended to review and improve the state verification mechanisms in the OAuth implementation to prevent manipulation of the authentication process.
Other vulnerabilities in OAuth implementation
Original NVD description (English source)
Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and cause a victim’s account to be linked to an attacker-controlled account. This can result in unauthorized account linking and potential account takeover.