CVE-2026-111622: URL Redirection to Untrusted Site ('Open Redirect') in a466350665 smart-sso

CVE-2026-111622 describes an open redirect vulnerability in the smart-sso product (up to version 2.1.1) within the /login handler. The vulnerability arises from improper validation of the redirectUri parameter, which attackers can exploit by sending maliciously crafted /login URLs to users. When users with active SSO sessions follow these links, attackers can capture OAuth2 authorization codes. These codes can subsequently be redeemed at the /oauth2/access_token endpoint with any valid client credentials to obtain the victims' access tokens, potentially compromising their accounts.

Successful exploitation allows unauthenticated attackers to steal OAuth2 authorization codes from users with active sessions, leading to unauthorized access tokens issuance. This compromises user accounts and access privileges associated with the OAuth2 tokens, representing a high security risk.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with unsolicited /login URLs containing redirectUri parameters and consider implementing additional validation or monitoring on their OAuth2 endpoints.