What is CVE-2026-66901?

CVE-2026-66901 is a high-severity vulnerability in Cjcollier Google::auth, classified under Insertion of Sensitive Information into Sent Data. CVSS score: 7.5/10. Published 2026-08-04.

How severe is CVE-2026-66901?

High severity. CVSS v3 base score is 7.5 out of 10.

SSRF in Cjcollier Google::auth

CVE-2026-66901

Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSON. The URLs the library requests are read from the credentials JSON, and their hos…

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Cjcollier Google::auth — versions 0

Weakness classification (CWE)

References

9b29abf9-4ab0-4765-b253-1875cd9b441e (patch)
9b29abf9-4ab0-4765-b253-1875cd9b441e (patch)
9b29abf9-4ab0-4765-b253-1875cd9b441e (patch)
9b29abf9-4ab0-4765-b253-1875cd9b441e (patch)
9b29abf9-4ab0-4765-b253-1875cd9b441e (release-notes)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2026-66901?: CVE-2026-66901 is a high-severity vulnerability in Cjcollier Google::auth, classified under Insertion of Sensitive Information into Sent Data. CVSS score: 7.5/10. Published 2026-08-04.
How severe is CVE-2026-66901?: High severity. CVSS v3 base score is 7.5 out of 10.