VULNERABILITY INTELLIGENCE

CVE-2026-41479

CVSS score5.4 MEDIUM

EPSS probability0.22%

CISA KEVNot currently listed

Published2026-06-22

Last modified2026-06-26

Description

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.10 and 1.7.1, Authlib's OAuth 2.0 authorization endpoint can be turned into an unauthenticated open redirect when a request uses an unsupported response_type and supplies an attacker-controlled redirect_uri. The …