CVE-2026-84003HighCVSS 7.4
Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.
🎯 Affected products1
- Microsoft Authentication Library (MSAL) for Node.js
✅ Remediation
KBRelease Notes (Security Update) — fixed build 5.6.0