CVE Catalog
CVE-2026-84003
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk0.43%
37th percentile - higher than 37% of all known CVEs
Summary
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.
Risk Assessment
Risk of impersonating a user or application, potentially leading to unauthorized access to protected resources.
Recommendation
It is recommended to update MSAL to the latest version and implement anti-replay mechanisms such as nonce and timestamp.
Other vulnerabilities in Microsoft Authentication Library (MSAL) for Node.js
Original NVD description (English source)
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS