CVE-2026-55461 is an open redirect vulnerability in Snipe-IT before version 8.6.2. The vulnerability arises from the user edit flow where the application stores the URL from the Referer header (which can be attacker-controlled) into Laravel’s intended URL session value. Later, when redirect_option=back is submitted, the application uses redirect()->intended(...) to redirect the user, potentially to an untrusted external site. This allows Snipe-IT to be exploited as a trusted redirector after a legitimate user edit action. The vulnerability is resolved in Snipe-IT version 8.6.2.

An attacker can exploit this vulnerability to redirect users to untrusted external websites by manipulating the Referer header during the user edit flow. This can facilitate phishing or other social engineering attacks by leveraging the trust users have in the legitimate Snipe-IT application. The CVSS 3.1 score is 6.1 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and partial confidentiality and integrity impact.

Upgrade Snipe-IT to version 8.6.2 or later, where this open redirect vulnerability is fixed. Patch status is confirmed by the vendor advisory stating the issue is fixed in 8.6.2. No additional mitigations are specified or required once the upgrade is applied.