CVE-2026-115400
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
33/100
Published: 2026-10-22
Modified: 2026-10-29
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
High
UI:
None
AT:
None
VC:
High
VI:
None
VA:
None
Description
crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column. Attackers can read the plaintext long-lived refresh tokens from a compromised or exposed Postgres database to gain indefinite, unauthenticated access to all registered users' Google Search Console data.