CVE-2026-91161Published
OpenWA: VIEWER API keys can read WhatsApp group invite codes
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-91161 · Microsoft / collected KEV context
cve-program · CVE-2026-91161
- https://github.com/rmyndharis/OpenWA/security/advisories/GHSA-45fh-xj7x-vj2x
- https://github.com/rmyndharis/OpenWA/pull/1572
- https://github.com/rmyndharis/OpenWA/commit/a888a0121543426d4e1bf55f9edaed8306ae2699
- https://github.com/rmyndharis/OpenWA/commit/d66439db9653c7aa7cbfb763003c8d3cbc8f623c
- https://github.com/rmyndharis/OpenWA/releases/tag/v0.23.5
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.