CyberRota Analysis
AI-GeneratedThe vulnerability in Exchange allows unauthenticated attackers to exploit the MCP OAuth dynamic client registration endpoint, which fails to validate redirect URIs. This flaw enables attackers to register malicious clients that can intercept authorization codes from users, leading to session hijacking and unauthorized access to sensitive data. Organizations using Exchange should prioritize this issue to mitigate potential breaches and protect user credentials.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation, allowing attackers to register clients pointing to attacker-controlled hosts. Attackers can send authorization URLs to signed-in users, capture their authorization codes upon consent approval, and exchange them for access tokens to hijack MCP sessions.