CVE-2026-31381

Description

An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.

PUBLISHED Reserved 2026-03-09 | Published 2026-03-20 | Updated 2026-03-23 | Assigner rapid7

Problem types

CWE-598 Use of GET request method with sensitive query strings

Product status

Credits

Christopher O’Boyle, Cybersecurity Advisor at Rapid7 finder

References

www.rapid7.com/...ht-assist-information-disclosure-xss-fixed third-party-advisory

communities.gainsight.com/...-31381-and-cve-2026-31382-30587 vendor-advisory

cve.org (CVE-2026-31381)

nvd.nist.gov (CVE-2026-31381)

Download JSON