CVE-2026-55461 is an open redirect vulnerability in Snipe-IT before version 8.6.2. The vulnerability arises because the user edit flow stores the URL from the Referer header, controlled by an attacker, into Laravel's intended URL session value. Later, when redirect_option=back is submitted, the application uses redirect()->intended(...) which can redirect users to attacker-specified URLs. This enables Snipe-IT to be used as a trusted redirector after legitimate user edit actions. The vulnerability is resolved in version 8.6.2.

An attacker can exploit this vulnerability to redirect users to malicious external websites by manipulating the Referer header during the user edit flow. This could facilitate phishing or other social engineering attacks by leveraging the trust in the legitimate Snipe-IT domain. The CVSS 3.1 base score is 6.1 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and partial confidentiality and integrity impact.

Upgrade Snipe-IT to version 8.6.2 or later where this vulnerability is fixed. No other official remediation or temporary fixes are documented. Patch status is not explicitly stated as 'patchAvailable' or 'official-fix' in the source, but the description confirms the issue is fixed in 8.6.2, so upgrading to 8.6.2 or later is the recommended remediation.