Recorded 10 Nov 2026 at 18:32 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
CVEMicrosoft Security Response Center
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
Insufficiently protected credentials in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.
What it said
CVE
CVE-2026-108470
Severity
Important
CVSS base score
Not published
CVSS vector
Not published
Impact
Information Disclosure
Exploitation detected
No known exploitation (MSRC assessment)
Publicly disclosed
No (MSRC assessment)
Exploitability
Exploitation Less Likely
Component
Microsoft Authentication Library (MSAL) for Node.js