CVE-2022-0916: Logitech Options

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

Affected products

• Logitech Options: before 9.60.87 (fixed in 9.60.87)

Published 2022-05-03. Last modified 2026-06-17.