Security Advisory
CVE-2026-44506
8.2
HIGH
Vulnerability Description
Medplum is a developer platform that enables development of healthcare apps. In Medplum versions 4.1.10 through 5.1.6, the /oauth2/register endpoint could return the client_secret of preconfigured OAuth clients defined via the defaultOAuthClients server configuration when a matching redirect_uri was provided. This issue has been patched in version 5.1.7.
Published Date
September 3, 2026
Official Source
NIST NVD Advisory