Concourse login flow has an open redirect issue

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-49826 · CVE overview and exploitation status

EUVD-2026-58716

GHSA-8w27-c4vc-88q9

BIT-concourse-2026-49826

GO-2026-5866

cve-program · CVE-2026-49826

• https://github.com/concourse/concourse/security/advisories/GHSA-8w27-c4vc-88q9
• https://github.com/concourse/concourse/commit/ac60be5f0435b6592f5a4fcc089050d72ad2452c
• https://github.com/concourse/concourse/releases/tag/v8.2.3

euvd · EUVD-2026-58716

• https://github.com/concourse/concourse/security/advisories/GHSA-8w27-c4vc-88q9
• https://github.com/concourse/concourse/commit/ac60be5f0435b6592f5a4fcc089050d72ad2452c
• https://github.com/concourse/concourse/releases/tag/v8.2.3

nvd · CVE-2026-49826

• https://github.com/concourse/concourse/commit/ac60be5f0435b6592f5a4fcc089050d72ad2452c
• https://github.com/concourse/concourse/releases/tag/v8.2.3
• https://github.com/concourse/concourse/security/advisories/GHSA-8w27-c4vc-88q9

osv · GHSA-8w27-c4vc-88q9

• https://github.com/concourse/concourse/security/advisories/GHSA-8w27-c4vc-88q9
• https://github.com/concourse/concourse/commit/ac60be5f0435b6592f5a4fcc089050d72ad2452c
• https://github.com/concourse/concourse
• https://github.com/concourse/concourse/releases/tag/v8.2.3

osv · GO-2026-5866

• https://github.com/concourse/concourse/security/advisories/GHSA-8w27-c4vc-88q9
• https://github.com/concourse/concourse/commit/ac60be5f0435b6592f5a4fcc089050d72ad2452c
• https://github.com/concourse/concourse/releases/tag/v8.2.3

No related changes are available here.