CVE-2026-109461
CVE-2026-109461 · Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.
CVSS 5.9 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
microsoft identity client for nodejs
- Versions
- ≥ 5.0.0, < 7.1.0: Affected (custom)
Update to 7.1.0
@azure/msal-node npm
- Affected ranges
- SEMVER: ≥ 5.0.0-beta.0, < 7.1.0
Update to 7.1.0