Skip to content
Sign in
7.4 High

CVE-2026-84003 Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized…

Description

Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.

Affected products and versions

Product Affected versions Fixed in
Microsoft Authentication Library 1.0 1.0.0 → < 5.6.0 5.6.0

Other CVEs of Microsoft Authentication Library

The 2 CVEs of Microsoft Authentication Library →
CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability 5.5 Medium
Track this CVE