AI Security Research: Windsurf IDE OAuth 2.0 Vulnerability (CVSS 7.1)
Zero-Day vulnerability research and responsible disclosure on an AI-powered IDE authentication pipeline
During deep-dive protocol analysis of the OAuth 2.0 implicit flow, I identified a critical missing nonce...