Live › vulnerability › CVE-2026-114619
Go to dashboardAuthlib before 1.9.0 checks the raw client-supplied scope instead of the filtered scope in its OpenID implicit grant. A registered client that may request ID tokens but not the openid scope can add openid, get user consent, and receive a signed ID token with the user's subject and allowed profile claims.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running an OAuth or OpenID Connect server built with Authlib that offer the implicit flow with ID tokens. Exposure requires a registered client permitted an ID token response type but not the openid scope. Deployments that use only the authorization code flow, or allow openid for every client, are not affected.
No product ranges from the sources yet.
pip show authlib and compare it to 1.9.0.id_token) in the authorization server code.id_token without allowing the openid scope.1.9.0 or later.openid only for clients that should receive ID tokens, or stop offering the implicit ID token response type.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDImplicitGrant.validate_authorization_request() checks the client-controlled raw request.payload.scope for openid after the parent grant has filtered allowed scopes into request.scope. A registered client permitted an ID token response type but not the openid scope can add openid to the request, obtain user consent, and receive a signed ID token containing the user's subject and allowed profile claims. Authorization code flow and deployments that allow openid for every client permitted an ID token response are not affected. In authlib/oidc/core/grants/implicit.py, OpenIDImplicitGrant.validate_authorization_request() checks request.payload.scope instead of the filtered request.scope. This issue is fixed in version 1.9.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-114619")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.