CVE-2026-55185

Name of the Vulnerable Software and Affected Versions miniflux-v2 (affected versions not specified)

Description URL restrictions can be bypassed, leading to an open redirect. The application uses the IsRelativePath function to validate redirect URLs by requiring relative paths and prohibiting host or schema entries. However, an attacker can bypass these protections by using a backslash in the redirect url parameter at the /login endpoint. Because some browsers parse a backslash as a forward slash during redirection, a payload such as /fushuling.com is treated as a relative path by the server but redirects the user to an external domain.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the redirect url parameter in the /login endpoint until the issue is resolved.