{"id":"CVE-2026-83589","revision":"9f30917cfb66445dae6525526eec64f2","records":[{"revision":"9f30917cfb66445dae6525526eec64f2","observedAt":"2026-10-23T16:01:20.601+00:00","statement":{"source":"cve-program","id":"CVE-2026-83589","aliases":[],"title":"Oauth-proxy: open redirect via /\\ and /\\t bypass in post-login redirect","description":"A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an arbitrary external website after authenticating. This open redirect can be leveraged to conduct phishing attacks or credential theft.","state":0,"publishedAt":"2026-10-01T09:17:43.584+00:00","modifiedAt":"2026-10-23T05:09:14.234+00:00","affected":[{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift4/ose-oauth-proxy","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4.14\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift4/ose-oauth-proxy\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1791837363\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4.14::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift4/ose-oauth-proxy-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4.15\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift4/ose-oauth-proxy-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1791632336\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4.15::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift4/ose-oauth-proxy-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4.18\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift4/ose-oauth-proxy-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1790882320\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4.18::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift4/ose-oauth-proxy-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4.19\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift4/ose-oauth-proxy-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1790807096\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4.19::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift4/ose-oauth-proxy-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4.20\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift4/ose-oauth-proxy-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1790704224\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4.20::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift4/ose-oauth-proxy-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4.21\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift4/ose-oauth-proxy-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1790706478\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4.21::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift4/ose-oauth-proxy-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4.22\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift4/ose-oauth-proxy-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1790724885\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4.22::el9\"\n ]\n }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","score":6.1,"severity":"MEDIUM"}],"references":["https://access.redhat.com/errata/RHSA-2026:74380","https://access.redhat.com/errata/RHSA-2026:74383","https://access.redhat.com/errata/RHSA-2026:74429","https://access.redhat.com/errata/RHSA-2026:79039","https://access.redhat.com/errata/RHSA-2026:79169","https://access.redhat.com/errata/RHSA-2026:82785","https://access.redhat.com/errata/RHSA-2026:82813","https://access.redhat.com/security/cve/CVE-2026-83589","https://bugzilla.redhat.com/show_bug.cgi?id=2518379"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-83589","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-83589","identifiers":["CVE-2026-83589"]},"retained":false,"historicalAffected":[]}],"coverage":[]}