{"id":7212,"date":"2026-11-11T17:19:02","date_gmt":"2026-11-11T17:19:02","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft"},"modified":"2026-11-11T17:19:02","modified_gmt":"2026-11-11T17:19:02","slug":"cve-2026-123271-chatcli-oauth-token-theft","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cve-2026-123271-chatcli-oauth-token-theft","title":{"rendered":"CVE-2026-123271: ChatCLI OAuth Flaw Allows Token Theft via Malicious MCP Servers"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Vulnerability Overview<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">ChatCLI versions 1.159.0 through 1.215.1 contain a high-severity origin validation error (CVE-2026-123271) in the Model Context Protocol (MCP) OAuth login flow. The vulnerability allows a malicious or compromised MCP server to obtain OAuth bearer tokens intended for other resources and replay them against those resources.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Technical Details<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When a user logs in to a remote MCP server using the `\/mcp login` command or the `@mcp-login` tool, ChatCLI accepted the `resource` member from the Protected Resource Metadata served by the MCP server without performing the identity check required by RFC 9728 section 3.3. The application used this server-supplied resource value as the RFC 8707 resource indicator in the authorization request, code exchange, stored OAuth metadata, and every token refresh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A malicious MCP server could declare a different resource served by the same authorization server. After the user completed consent, ChatCLI would send the resulting token\u2014audience-bound to that other resource\u2014to the MCP server as its bearer credential. The server could then replay this token against the other resource.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Additional issues identified in the vulnerable code include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>The `resource_metadata` URL from the server&#8217;s WWW-Authenticate challenge was followed on any origin<\/li><li>Discovery documents were read without size limits<\/li><li>The SSE transport accepted a messages endpoint on any origin and sent server credentials there<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Exploitation Requirements<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Successful exploitation requires several conditions:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>A malicious or compromised MCP server<\/li><li>An authorization server that supports dynamic client registration and honors the requested resource indicator<\/li><li>A second resource of that authorization server that accepts the token<\/li><li>The user completing the consent flow<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Affected Versions<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">ChatCLI versions 1.159.0 through 1.215.1 are affected by this vulnerability.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Patch Information<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability is fixed in ChatCLI version 1.215.2, released on October 11, 2026. The patch implements multiple security improvements:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>The canonical URL of the configured MCP server is now the only resource indicator used<\/li><li>Protected resource metadata naming another resource is refused<\/li><li>The `resource_metadata` URL is followed only on the server&#8217;s own origin<\/li><li>Discovery and registration documents are capped at 1 MiB<\/li><li>Credentials stored by affected versions for another resource are never sent and require a new login<\/li><li>The SSE transport confines the messages endpoint to the server&#8217;s origin<\/li><li>MCP transports refuse cross-origin and downgrading redirects<\/li><li>Authorization server metadata must name its issuer per RFC 8414 section 3.3 and use HTTPS endpoints<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Remediation Steps<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Users should upgrade to ChatCLI version 1.215.2 immediately. After upgrading, users who logged in to an untrusted MCP server should:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. Run `\/mcp logout <server>` for the affected server<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Revoke the ChatCLI client at the authorization server<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As a workaround for users unable to upgrade immediately, only log in to MCP servers that are trusted.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Credit<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability was reported by Theodoros Lampropoulos (@GimmyDatBeeR).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-123271\" target=\"_blank\" rel=\"noreferrer noopener\">NVD &#8211; CVE-2026-123271<\/a><\/li><li><a href=\"https:\/\/github.com\/diillson\/chatcli\/security\/advisories\/GHSA-95vg-3r9c-2v5q\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Security Advisory GHSA-95vg-3r9c-2v5q<\/a><\/li><li><a href=\"https:\/\/github.com\/diillson\/chatcli\/commit\/951fe24b8e090eae86bf8edb13a788916b1e6c91\" target=\"_blank\" rel=\"noreferrer noopener\">ChatCLI Fix Commit 951fe24<\/a><\/li><li><a href=\"https:\/\/github.com\/diillson\/chatcli\/releases\/tag\/v1.215.2\" target=\"_blank\" rel=\"noreferrer noopener\">ChatCLI Release v1.215.2<\/a><\/li><li><a href=\"https:\/\/www.vulncheck.com\/advisories\/chatcli-before-1.215.2-origin-validation-error-via-unvalidated-mcp-oauth-resource-indicator\" target=\"_blank\" rel=\"noreferrer noopener\">VulnCheck Advisory &#8211; ChatCLI Origin Validation Error<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>ChatCLI versions before v1.215.2 contain an origin validation vulnerability in the MCP OAuth login flow that allows malicious servers to obtain and replay user bearer tokens against other resources on the same authorization server.<\/p>\n","protected":false},"author":2,"featured_media":7211,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"high","_nx_sec_affected":"ChatCLI versions 1.159.0 through 1.215.1","_nx_sec_status":"patch-available","_nx_sec_kicker":"ALERT: ChatCLI OAuth Flaw Enables Token Replay Attacks"},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-7212","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-123271: ChatCLI OAuth Token Theft Vulnerability<\/title>\n<meta name=\"description\" content=\"CVE-2026-123271 in ChatCLI before v1.215.2 allows malicious MCP servers to steal OAuth tokens by declaring alternate resources without validation.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-123271: ChatCLI OAuth Token Theft Vulnerability\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-123271 in ChatCLI before v1.215.2 allows malicious MCP servers to steal OAuth tokens by declaring alternate resources without validation.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-11T17:19:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-123271-chatcli-oauth-token-theft-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"CVE-2026-123271: ChatCLI OAuth Flaw Allows Token Theft via Malicious MCP Servers\",\"datePublished\":\"2026-11-11T17:19:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft\"},\"wordCount\":479,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123271-chatcli-oauth-token-theft-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-11T17:19:02+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft\",\"name\":\"CVE-2026-123271: ChatCLI OAuth Token Theft Vulnerability\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123271-chatcli-oauth-token-theft-title.webp\",\"datePublished\":\"2026-11-11T17:19:02+00:00\",\"description\":\"CVE-2026-123271 in ChatCLI before v1.215.2 allows malicious MCP servers to steal OAuth tokens by declaring alternate resources without validation.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123271-chatcli-oauth-token-theft-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-123271-chatcli-oauth-token-theft-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"A security researcher examining authentication flow diagrams on a computer screen in a dimly lit office\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-123271-chatcli-oauth-token-theft#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-123271: ChatCLI OAuth Flaw Allows Token Theft via Malicious MCP Servers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-123271: ChatCLI OAuth Token Theft Vulnerability","description":"CVE-2026-123271 in ChatCLI before v1.215.2 allows malicious MCP servers to steal OAuth tokens by declaring alternate resources without validation.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft","og_locale":"en_US","og_type":"article","og_title":"CVE-2026-123271: ChatCLI OAuth Token Theft Vulnerability","og_description":"CVE-2026-123271 in ChatCLI before v1.215.2 allows malicious MCP servers to steal OAuth tokens by declaring alternate resources without validation.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft","og_site_name":"i10X News","article_published_time":"2026-11-11T17:19:02+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-123271-chatcli-oauth-token-theft-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"CVE-2026-123271: ChatCLI OAuth Flaw Allows Token Theft via Malicious MCP Servers","datePublished":"2026-11-11T17:19:02+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft"},"wordCount":479,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123271-chatcli-oauth-token-theft-title.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-11T17:19:02+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft","url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft","name":"CVE-2026-123271: ChatCLI OAuth Token Theft Vulnerability","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123271-chatcli-oauth-token-theft-title.webp","datePublished":"2026-11-11T17:19:02+00:00","description":"CVE-2026-123271 in ChatCLI before v1.215.2 allows malicious MCP servers to steal OAuth tokens by declaring alternate resources without validation.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123271-chatcli-oauth-token-theft-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-123271-chatcli-oauth-token-theft-title.webp","width":1344,"height":768,"caption":"A security researcher examining authentication flow diagrams on a computer screen in a dimly lit office"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-123271-chatcli-oauth-token-theft#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"CVE-2026-123271: ChatCLI OAuth Flaw Allows Token Theft via Malicious MCP Servers"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=7212"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7212\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/7211"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=7212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=7212"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=7212"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=7212"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=7212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}