The Aqara Cloud OAuth Authorization Endpoint suffers from improper validation of unsafe equivalence in input, specifically lax domain matching controls that enable a redirect bypass. This vulnerability is identified as CWE-1289 and allows an attacker to manipulate the OAuth authorization flow potentially leading to unauthorized redirection to malicious domains. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) reflects that the attack can be performed remotely with low complexity, requires no privileges, but user interaction is needed. The impact includes complete compromise of confidentiality and integrity of the affected service session. The vulnerability is published and assigned CVE-2026-50090 but lacks an official remediation or patch at this time.

Successful exploitation of this vulnerability can lead to a redirect bypass in the OAuth authorization process, potentially allowing attackers to redirect users to malicious sites. This can result in high confidentiality and integrity impacts, such as theft of sensitive tokens or credentials and unauthorized access. Availability is not affected. The vulnerability requires user interaction but no privileges or authentication, making it a critical risk for users of the affected endpoint.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should exercise caution when interacting with the affected OAuth authorization endpoint and monitor for updates from Aqara. No temporary or official fixes are currently documented.