Coroot vulnerabilities
We track 1 vulnerability in Coroot products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Coroot vulnerabilities
- 7.1 High severity
coroot: URL Redirection to Untrusted Site
Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation, allowing attackers to register clients pointing to attacker-controlled hosts. Attackers can send authorization URLs to sign