CVE-2026-48765

This vulnerability isn't just a missing authorization check — it's the consequence of treating workspace membership as a mutable parameter rather than an immutable credential property. The `handleUpdateOAuthCredentials()` endpoint accepted `workspaceId` as client-supplied input and validated that the workspace existed, when it should have derived workspace context from the credential's existing ownership. This allowed a read collaborator to extract a credential ID from bot configuration and submit it back through this write endpoint with a reassigned workspace, effectively hijacking the credential. The critical distinction for defenders: a patch that validates workspace membership before allowing the update is fragile, while a fix that removes the workspace parameter entirely and derives it from credential ownership is architectural. You need to determine which approach 3.17.0 took. More importantly, audit your entire credential API surface for equivalent patterns — where object IDs appear in readable configurations and are accepted as mutable parameters in write operations. This exact pattern has recurred across Atlassian Crowd, GitLab, and other collaborative platforms that retrofitted multi-tenancy onto global ID namespaces. Your immediate actions: First, identify all OAuth credentials created or modified during the exposure window — every downstream API call made with those credentials is now suspect and may require re-authorization. Second, verify whether other credential mutation endpoints (duplication, migration, cloning) still accept workspace context as client input. Third, check your audit logs for credential updates that changed workspaceId — the attack may not have left obvious unauthorized-access signatures, appearing instead as legitimate administrative operations. The blast radius extends beyond the vulnerability itself: any service connected via OAuth through compromised credentials represents a potential supply-chain pivot that requires independent remediation.

Reviewed through automated stages and approved by a human before publication.