CVE-2026-63094

Name of the Vulnerable Software and Affected Versions SigNoz versions prior to 0.133.1

Description An open redirect flaw exists in the SSO authentication flow for instances configured with Google OAuth, SAML, or OIDC. Unauthenticated attackers can exploit this by calling the sessions context endpoint with a ref parameter pointing to a host under their control. By delivering a crafted login URL to a victim, the attacker can steal the victim's access and refresh tokens upon completion of the SSO authentication process.

Recommendations Update SigNoz to version 0.133.1 or later. As a temporary mitigation, restrict access to the sessions context endpoint or avoid using the ref parameter in SSO flows until the update is applied.