CVE-2026-12341 — SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability

CVE-2026-12341

SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability PUBLISHED

Description (CNA)

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.

Affected (CNA)

Vendor / product	Versions
SailPoint Technologies / IdentityIQ	affected 8.5 through 8.5p1; affected 8.4 through 8.4p4; affected 8.3 through 8.3p5

CWE

CWE-287

References

https://www.sailpoint.com/security-advisories/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.