CVE Catalog
CVE-2026-58425
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.24%
16th percentile - higher than 16% of all known CVEs
Summary
The vulnerability in OAuth token introspection returns metadata of tokens issued to other clients, violating section 4 of RFC 7662.
Risk Assessment
Risk of exposing information about other clients' tokens, potentially leading to confidentiality breaches and session hijacking.
Recommendation
Update the OAuth implementation to a patched version and test token introspection to ensure only the correct client's data is returned.
Original NVD description (English source)
OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)