CVE-2026-44166

MEDIUM SEVERITY

Vulnerability Description

PocketBase vulnerable to account pre-hijacking via OAuth2 unverfied->verified autolinking upgrade

Published Date

May 05, 2026

Last Modified

May 05, 2026

Source

GitHub

Vendor

Product

github.com/pocketbase/pocketbase