CVE-2026-91201

Name of the Vulnerable Software and Affected Versions DocsGPT versions prior to 0.20.1

Description The software posts OAuth connector session tokens to a wildcard target origin in the 'callback-status' endpoint without validating the sender origin. An attacker can act as the window.opener during OAuth authorization to obtain session tokens and provider account emails, which can then be used to disconnect the cloud storage connectors of the victims.

Recommendations Update DocsGPT to a version later than 0.20.0.