CVE-2026-19078

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description A flaw in the oauth-server component allows an open redirect. This occurs because the grant approval handler does not properly validate the then parameter. A remote attacker can craft a malicious URL that redirects an authenticated user to an external website upon approval or denial of the grant, which may facilitate phishing attacks to steal sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.