Back to overview

CVE-2026-41479

MEDIUM
5.4
CVSS 3.1
Description
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.10 and 1.7.1, Authlib's OAuth 2.0 authorization endpoint can be turned into an unauthenticated open redirect when a request uses an unsupported response_type and supplies an attacker-controlled redirect_uri. The vulnerable behavior happens before client lookup and before any redirect URI validation. As a result, an attacker does not need a valid client registration, an authenticated user, or any prior state. A single request to the authorization endpoint is enough to obtain a 302 Location response to an arbitrary attacker-controlled URL. This vulnerability is fixed in 1.6.10 and 1.7.1.

Metadata

CVE ID
CVE-2026-41479
State
PUBLISHED
Assigner
GitHub_M
Reserved
2026-04-20 16:14 UTC
Published
2026-06-22 20:35 UTC
Last updated
2026-06-22 20:35 UTC
Primary CWE
CWE-601
CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vendor / Product
authlib / authlib
Sources
cve.org  ·  NVD

Severity & Metrics

5.4 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected products (1)
VendorProductPlatformVersions
authlib authlib — < 1.6.10, = 1.7.0
Weakness (CWE)
CWESourceDescription
CWE-601 cna CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CVSS scores (1)
ScoreSeverityVersionSourceVector
5.4 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
References (2)
Back to overview