5.9 Medium

CVE-2026-109461 Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to…

Description

Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Identity Client for NodeJS 5.0	5.0.0 → < 7.1.0	7.1.0

References

Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability msrc.microsoft.com

Timeline

Published October 16, 2026
Last modified October 31, 2026

Track this CVE