CVE-2026-57818

HIGH

Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider

Title source: cna

Description

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory

https://lists.apache.org/thread/7q08mz8bcbosp25wok7gr537zlp15mfz

Mailing List

http://www.openwall.com/lists/oss-security/2026/08/06/20

Scores

CVSS v3 8.1

EPSS 0.0034

EPSS Percentile 27.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-367

Status published

Products (4)

apache/cxf < 3.6.12

Apache Software Foundation/Apache CXF < 3.6.12

Apache Software Foundation/Apache CXF 4.0.0 - 4.1.8

Apache Software Foundation/Apache CXF 4.2.0 - 4.2.3

Published Aug 06, 2026

Tracked Since Aug 06, 2026