CVE-2026-115400

The record

crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column. Attackers can read the plaintext long-lived refresh tokens from a compromised or exposed Postgres database to gain indefinite, unauthenticated access to all registered users' Google Search Console data.

Affected packages

Related vulnerabilities

• CVE-2026-110200 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to… CWE-312
• CVE-2026-116691 MLflow is an open source AI engineering platform for agents, large language models, and… CWE-312
• CVE-2026-96293 A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint… CWE-312
• CVE-2026-114223 NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information… CWE-312
• CVE-2026-77564 Talos Linux is a Linux distribution built for Kubernetes deployments. CWE-312
• CVE-2026-86280 A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management &… CWE-312
• CVE-2026-53603 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. CWE-312
• CVE-2026-73748 A vulnerability in the affected interface of HPE Networking Fabric Composer allows an… CWE-312