Open redirect in authlib - CVE-2026-44681
Published: May 11, 2026
Vulnerability identifier: #VU130999
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N]
CVE-ID: CVE-2026-44681
CWE-ID: CWE-601
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to redirect users to an attacker-controlled URL.
The vulnerability exists due to url redirection to an untrusted site in OpenIDImplicitGrant and OpenIDHybridGrant authorization request validation when processing authorization requests that omit the openid scope. A remote attacker can send a specially crafted authorization request with an attacker-controlled redirect_uri to redirect users to an attacker-controlled URL.
Exploitation requires an authorization server deployment that registers the OIDC Implicit or Hybrid grant types, and user interaction is required.
Affected software
authlib
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Python 3 Module
openSUSE Leap
python311-Authlib
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Python 3 Module
openSUSE Leap
python311-Authlib
How to mitigate CVE-2026-44681
Install security update from vendor's website.
authlib - addressed in versions 1.6.12, 1.7.1
python311-Authlib - update to 1.3.1-150600.3.22.1
python311-Authlib - update to 1.3.1-150600.3.22.1