CVE-2026-109461

MEDIUMCVSS 5.90% EPSS

Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.

Published 2026-10-16 · last modified 2026-10-18

Affected products

Vendor	Product
microsoft	microsoft identity client for nodejs

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.