CVE-2026-90712

MEDIUM 4.3

Gitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of service

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in Gitlawb openclaude up to 0.30.0. Impacted is the function waitForCallback of the file src/services/api/xaiOAuthCallback.ts of the component xAI OAuth Callback Handler. The manipulation of the argument Error leads to denial of service. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-404
Vendor	gitlawb
Product	openclaude
Published	Sep 14, 2026
Last Updated	Sep 14, 2026

Stay Ahead of the Next One

Get instant alerts for gitlawb openclaude

Be the first to know when new medium vulnerabilities affecting gitlawb openclaude are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Gitlawb / openclaude

0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9 0.10 0.11 0.12 0.13 0.14 0.15 0.16 0.17 0.18 0.19 0.20 0.21 0.22 0.23 0.24 0.25 0.26 0.27 0.28 0.29 0.30.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/403266 vuldb.com: https://vuldb.com/vuln/403266/cti vuldb.com: https://vuldb.com/cve/CVE-2026-90712 vuldb.com: https://vuldb.com/submit/918715 github.com: https://github.com/Gitlawb/openclaude/issues/2101 github.com: https://github.com/Gitlawb/openclaude/

Credits

🔍 nedlir (VulDB User) VulDB CNA Team