AIQB
TutorialsOrdinary

Five open issues, one bug: your MCP OAuth refresh token is being replayed after rotation

Source: DEV Community·

Summary

OpenAI Codex, Claude Code, Gemini CLI and Hermes Agent all have open issues that look different and are the same bug: the client replays a refresh token the server already rotated.
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-60d1883f6257ccf02ea29fa9