CVE-2026-108865 Details
Description
AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 server never authenticates a resource owner. Attackers can register a client, request a code from /authorize, and exchange it at /token to access OAuth2-protected MCP prefixes, proxied upstream APIs and injected credentials.
A vulnerability allowing authentication bypass in AmoyLab Unla versions through 0.10.0 has been identified. This issue arises because the OAuth2 server does not authenticate resource owners, allowing unauthenticated attackers to obtain valid access tokens. Exploitation involves registering a client, requesting an authorization code, and exchanging it for a token to access OAuth2-protected MCP prefixes, upstream proxied APIs, and injected credentials.
The authorization endpoint should be modified to require authentication of the resource owner and explicit consent before issuing authorization codes. Additionally, tokens should be bound to authenticated users, and the MCP gate should validate token ownership and scope against the requested prefix.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 11, 2026CISA-ADP
Assessed Oct 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| AmoyLab Unla | <= 0.10.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 14, 2026 | CVE Modified | CISA-ADP |
| Oct 11, 2026 | New CVE Received | [email protected] |