CVE-2026-16206

EUVD-2026-45417
A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function _load_id_token of the file oauth2_provider/oauth2_validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
Common Weakness Enumeration
References
https://github.com/django-oauth/django-oauth-toolkit/
https://github.com/django-oauth/django-oauth-toolkit/issues/1715
https://vuldb.com/cve/CVE-2026-16206
https://vuldb.com/submit/857897
https://vuldb.com/submit/857923
https://vuldb.com/vuln/380022
https://vuldb.com/vuln/380022/cti