PT-2026-104429 · Undefined · Undefined
CVE-2026-103977
·
Published
2026-10-02
·
Updated
2026-10-02
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Session-scoped TOTP limit. Fail the code, the ticket still works, try again!!
CVE-2026-103977: Rate limit is bound to the session, not the account. Repeated verification attempts stay on the same challenge.
#Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #AppSec #AuthBypass #MFA
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined