---
id: CVE-2026-91201
title: >-
  DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard
  target origin in the callback-status endpoint without validating sender origin
summary: >-
  DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard
  target origin in the callback-status endpoint without validating sender
  origin. Attackers can obtain session tokens and provider account emails by
  acting as window…
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L'
cwe:
  - CWE-346
vendor: arc53
product: DocsGPT
affected:
  - DocsGPT <= 0.20.0
published: '2026-09-14'
updated: '2026-09-23'
sourceUpdated: '2026-09-23T17:17:44.793'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-91201'
references:
  - url: 'https://github.com/arc53/DocsGPT'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/arc53/DocsGPT/blob/c36b0af17037449f34449efa97da82becfc9492d/docsgpt/api/connector/routes.py#L344-L366
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/arc53/DocsGPT/blob/c36b0af17037449f34449efa97da82becfc9492d/docsgpt/api/connector/routes.py#L515-L527
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/arc53/DocsGPT/blob/c36b0af17037449f34449efa97da82becfc9492d/frontend/src/components/ConnectorAuth.tsx#L57-L80
    label: disclosure@vulncheck.com
  - url: 'https://github.com/arc53/DocsGPT/issues/2766'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/docsgpt-through-0.20.0-oauth-token-disclosure-via-wildcard-postmessage
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
epss: 0.00208
epssPercentile: 0.09671
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-18T17:14:33.231816Z'
ingestedAt: '2026-09-14T23:17:06.519Z'
---

## Overview

DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth authorization, then use tokens to disconnect victims' cloud storage connectors.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.