CVE-2026-81509

Name of the Vulnerable Software and Affected Versions nforwardauth versions prior to 1.5.1

Description nforwardauth is a forward auth service enabling a single authentication middleware for multiple sites. The /login endpoint accepts an unvalidated r query parameter used as the post-authentication redirect destination. An unauthenticated attacker can craft a legitimate login URL that redirects users to an attacker-controlled website upon successful authentication, potentially facilitating phishing and social-engineering attacks by leveraging the trust of the authentication domain. This issue does not allow an unauthenticated ForwardAuth bypass.

Recommendations Update to version 1.5.1.