CVE-2026-78154
Description
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SDK onboarding path for mobile apps that have no backend of their own: a developer generates a code via the authenticated dashboard endpoint, the user types it into the app, and it's redeemed for SDK-scoped tokens.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
Sources have not yet published the affected products and versions for this vulnerability.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.