Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SDK onboarding path for mobile apps that have no backend of their own: a developer generates a code via the authenticated dashboard endpoint, the user types it into the app, and it's redeemed for SDK-scoped tokens.
CVSS
No CVSS.
References
No reference.
Configurations
No configuration.
History
No history.
Information
Published : 2026-08-24 00:16
Updated : 2026-08-25 09:17
NVD link : CVE-2026-78154
Mitre link : CVE-2026-78154
CVE.ORG link : CVE-2026-78154
JSON object : View
Products Affected
No product.
CWE
No CWE.