CVE-2026-55982 | CyberRota

CyberRota Analysis

AI-Generated

The vulnerability allows the OIDC userinfo endpoint to return identity claims without properly enforcing API token scopes, potentially exposing sensitive user information. This could lead to unauthorized access to user data, impacting applications that rely on OIDC for authentication and authorization. Organizations utilizing OIDC for user management should prioritize addressing this issue to safeguard user privacy and data integrity.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-55982

Severity

CRITICAL

CVSS

9.1

EPSS

0.17%

Original NVD Description

OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes