Search: CVE-2026-54770

CVE-2026-54770 is an open redirect vulnerability in the Pylons webob library prior to version 1.8.11. The issue arises from improper handling of Location header values in HTTP responses, allowing attacker-controlled input to bypass URL scheme checks and cause redirects to untrusted external sites. Exploitation requires user interaction by following the malicious redirect. The vulnerability is fixed in webob version 1.8.11.