Evidence · DiggingBeagle record
ChatCLI MCP OAuth resource identity mix-up advisory
- Source role
- vendor statement
Evidence record
Claim-level citations (1)
- supportsChatCLI requested MCP OAuth tokens for an unvalidated resource: ChatCLI 1.159.0 through 1.215.1 was affected by an MCP resource metadata binding issue, with same-origin and size controls added in 1.215.2.
GHSA-95vg-3r9c-2v5q, Impact, Affected versions and Patched versions