Open Redirect Vulnerability in oauth-proxy Affects Red Hat
CVE-2026-83589
6.1MEDIUM
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 1 October 2026
What is CVE-2026-83589?
A vulnerability exists in oauth-proxy due to improper validation of the destination redirect parameter during the post-login process. This flaw allows remote attackers to craft malicious links, which, when followed by users, redirect them to arbitrary external sites after authentication. Such open redirects can facilitate phishing attacks, potentially leading to credential theft and unauthorized access.
Affected Version(s)
Red Hat OpenShift Container Platform 4.14 1791837363
Red Hat OpenShift Container Platform 4.15 1791632336
Red Hat OpenShift Container Platform 4.18 1790882320