Authentication Bypass in Microsoft Authentication Library for Node.js

CVE-2026-84003

What is CVE-2026-84003?

The Microsoft Authentication Library (MSAL) for Node.js contains a vulnerability that allows unauthorized attackers to exploit an authentication bypass through a capture-replay method. This flaw can enable malicious actors to perform spoofing attacks over a network, potentially gaining unauthorized access to protected resources. Organizations using MSAL for Node.js should ensure they are updated to the latest version to mitigate this risk and protect sensitive applications.

References