Executive brief
Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion
Affected products
- Go github.com/obot-platform/obot
Junglewise Threat Intelligence
Severity: low · CVSS 3.1 · Published 2026-09-18
Technologies: github.com/obot-platform/obot (Go). Vendors: Go.
Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion