CVE-2026-15093 is an open redirect vulnerability in IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0. The issue arises from improper validation of user-supplied URLs, which could allow a remote attacker to redirect users to arbitrary external websites. This could be leveraged in phishing or social engineering attacks to trick users into visiting malicious sites. The vulnerability has a CVSS 3.1 base score of 4.3, indicating medium severity. As of the published date, no official fix or patch has been announced by IBM, and no known exploits are reported in the wild.

The vulnerability allows attackers to redirect users to untrusted external websites, which may facilitate phishing or social engineering attacks. Confidentiality, integrity, and availability impacts are limited, as the CVSS vector indicates only low confidentiality impact and no integrity or availability impact. The primary risk is user deception leading to potential secondary attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should exercise caution with URLs received from untrusted sources and consider implementing additional URL validation or filtering controls at the application or network level to mitigate open redirect risks.