CVE-2026-44681: authlib Open Redirect
Vulnerability summary
CVE-2026-44681 is a medium (CVSS 6.1) Open Redirect vulnerability in authlib. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20.3% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 2Timeline
- 27-05-2026PublishedVulnerability first disclosed.
- 02-06-2026Last modifiedVulnerability information updated.
Description
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.12 and 1.7.1, an unauthenticated open redirect in Authlib's OpenIDImplicitGrant and OpenIDHybridGrant authorization endpoint lets a remote attacker cause the authorization server to issue an HTTP 302 to an attacker-chosen URL by submitting an authorization request that omits the openid scope. This vulnerability is fixed in 1.6.12 and 1.7.1.
CVSS metrics
7 scores · 7 sources · 1 version- OSV · PypiEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- OSV · UbuntuEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- OSV · DebianEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- OSV · WolfiEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- OSV · ChainguardEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- NVDNIST6.1MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
+0.04 pp
From 0.25% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundAuthlib
Maturity: poc
Weaknesses
CWE · root cause- CWE-601URL Redirection to Untrusted Site ('Open Redirect')The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
- CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Affected systems
Chainguard7 products
- airflow-2All versions (No fix recorded)
- airflow-3< 3.2.1-r2
- mlflow< 3.16.0-r0
- mlflow-fips< 3.11.1-r0
- pgadmin4< 9.15-r1 | < 9.15-r0
Wolfi2 products
- airflow-3< 3.2.1-r2
- mlflow< 3.16.0-r0
Authlib1 product
- authlib≥ 1.7.0, < 1.7.1 | < 1.6.12 | 1.7.0
Debian1 product
- python-authlib< 1.2.0-1+deb12u2 | All versions (No fix recorded) | < 1.7.2-1
Opensuse1 product
- python-Authlib&distro=openSUSE Tumbleweed< 1.7.2-1.1
PyPI1 product
- authlib≥ 1.7.0, < 1.7.1 | < 1.6.12
Ubuntu1 product
- python-authlibAll versions (No fix recorded)
7 vendors · 14 products
References
11 links- github.com/authlib/authlib/security/advisories/GHSA-r95x-qfjj-fjj2X Refsource CONFIRMWEBEVIDENCEREPORTAdvisoryExploitMitigationVendor Advisory
- github.com/authlib/authlibPACKAGE
