Open Redirect Vulnerability in MISP's User Authentication Process

CVE-2026-10861

What is CVE-2026-10861?

An open redirect vulnerability exists in MISP's UsersController::routeafterlogin() function. This flaw allows an unauthenticated remote attacker to craft a malicious link, leading a user to a seemingly trusted MISP instance. Upon authentication, the user is redirected to an external URL controlled by the attacker, significantly increasing the likelihood of successful phishing attacks. This vulnerability highlights weaknesses in handling user-controlled input and underscores the importance of ensuring proper validation to prevent unauthorized redirects to external domains. The recent patch addresses this issue by ensuring that only local application paths are permissible as redirection targets.

References