CVE advisoryCRITICAL
CVE-2026-117656
Assent Sign in with Apple Impersonation Vulnerability
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An unauthenticated remote attacker can impersonate users by manipulating data during the "Sign in with Apple" authentication callback. This could allow an attacker to replace verified user information with their own, potentially leading to unauthorized access or actions in applications that rely on this data for accoun