TI-2026-80152 CVE-2026-116072 · GHSA-cm7p-vqx2-9527xPriority LOW 29Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redir…CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00122 · Published 2026-10-25 · No fix listed CWE-352
