CVE-2026-84003

The Microsoft Authentication Library (MSAL) for Node.js is vulnerable to an authentication bypass due to a capture-replay attack, enabling unauthorized attackers to spoof user identities over the network. This high-severity flaw poses significant risks to applications relying on MSAL for secure authentication. Organizations using this library should prioritize patching to mitigate potential exploitation and protect sensitive user data.