5.4

CVE-2026-41479: authlib Open Redirect

CVSS: 5.4v3.1MediumAnalyzed
AliasesSUSE-SU-2026:4111-1GHSA-w8p2-r796-3vmqPYSEC-2026-2119
Published 22-06-2026Last modified 23-06-2026
Open JSON

Vulnerability summary

CVE-2026-41479 is a medium (CVSS 5.4) Open Redirect vulnerability in authlib. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.3% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
32/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.4/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.26%
0%100%
Low · +0.07 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Timeline

  1. 22-06-2026
    PublishedVulnerability first disclosed.
  2. 23-06-2026
    Last modifiedVulnerability information updated.

Description

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.10 and 1.7.1, Authlib's OAuth 2.0 authorization endpoint can be turned into an unauthenticated open redirect when a request uses an unsupported response_type and supplies an attacker-controlled redirect_uri. The vulnerable behavior happens before client lookup and before any redirect URI validation. As a result, an attacker does not need a valid client registration, an authenticated user, or any prior state. A single request to the authorization endpoint is enough to obtain a 302 Location response to an arbitrary attacker-controlled URL. This vulnerability is fixed in 1.6.10 and 1.7.1.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.26%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

+0.07 pp

From 0.18% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Authlib

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Authlib1 product
Chainguard1 product
  • mlflow< 3.16.0-r0
Debian1 product
  • python-authlibAll versions (No fix recorded) | < 1.7.2-1
Opensuse1 product
  • python-Authlib&distro=openSUSE Leap 16.0< 1.5.2-bp160.4.1
PyPI1 product
  • authlib≥ 1.7.0, < 1.7.1 | < 1.6.10
Suse1 product
  • python-Authlib&distro=SUSE Linux Enterprise Module for Python 3 15 SP7< 1.3.1-150600.3.30.1
Ubuntu1 product
  • python-authlibAll versions (No fix recorded)
Wolfi1 product
  • mlflow< 3.16.0-r0

8 vendors · 8 products

References

11 links
Show all 11 references