Unla
Monthly
Unauthenticated remote attackers can bypass authentication in AmoyLab Unla through 0.10.0 by exploiting an OAuth2 authorization server that never authenticates a resource owner, allowing them to register a client, request an authorization code, and exchange it for a valid access token. This grants access to OAuth2-protected MCP prefixes, proxied upstream APIs, and injected credentials, with high confidentiality impact and low integrity impact. No public exploit identified at time of analysis, and no vendor-released patch is available; the vulnerability is remotely exploitable without authentication or user interaction, making it a high-priority issue for exposed instances.
Unauthenticated remote attackers can bypass authentication in AmoyLab Unla through 0.10.0 by exploiting an OAuth2 authorization server that never authenticates a resource owner, allowing them to register a client, request an authorization code, and exchange it for a valid access token. This grants access to OAuth2-protected MCP prefixes, proxied upstream APIs, and injected credentials, with high confidentiality impact and low integrity impact. No public exploit identified at time of analysis, and no vendor-released patch is available; the vulnerability is remotely exploitable without authentication or user interaction, making it a high-priority issue for exposed instances.