CVE-2026-109461 — Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.

Published: 2026-10-16 · CVSS: 5.9 · CVSS 3.1

Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision ccc9bdb4c4f8cb214cf2c1e7d07daea789e675ef