Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
Summary
| CVE | CVE-2026-83589 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-01 10:17:17 UTC |
| Updated | 2026-10-23 06:17:07 UTC |
| Description | A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an arbitrary external website after authenticating. This open redirect can be leveraged to conduct phishing attacks or credential theft. |
Risk And Classification
Primary CVSS: v3.1 6.1 MEDIUM from [email protected]
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.002490000 probability, percentile 0.150680000 (date 2026-10-15)
Problem Types: CWE-601 | CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 6.1 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| 3.1 | CNA | CVSS | 6.1 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
RequiredScope
ChangedConfidentiality
LowIntegrity
LowAvailability
NoneCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 1791837363 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 1791632336 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.18 | unaffected 1790882320 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.19 | unaffected 1790807096 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.20 | unaffected 1790704224 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.21 | unaffected 1790706478 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.22 | unaffected 1790724885 * rpm | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| access.redhat.com/errata/RHSA-2026:82785 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:82813 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:79039 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74380 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74383 | [email protected] | access.redhat.com | |
| access.redhat.com/security/cve/CVE-2026-83589 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74429 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:79169 | [email protected] | access.redhat.com | |
| bugzilla.redhat.com/show_bug.cgi | [email protected] | bugzilla.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2026-07-01T00:00:00.000Z | Reported to Red Hat. |
| CNA | 2026-08-31T20:00:00.000Z | Made public. |
Workarounds
CNA: Red Hat has not identified any known mitigations for this issue. Customers are advised to apply the available security update when released.
There are currently no legacy QID mappings associated with this CVE.