Threats Tagged 'cve-2026-42230'
View all threats tagged with 'cve-2026-42230'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-42230'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-42230: CWE-601: URL Redirection to Untrusted Site ('Open Redirect') in n8n-io n8nCVE-2026-42230 0 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /mcp-oauth/register endpoint accepted OAuth client registrations without authentication, allowing arbitrary redirect_uri values to be registered. When a user denies the MCP OAuth consent dialog, the handleDeny handler redirects the user to the registered redirect_uri without validation, enabling an open redirect to an attacker-controlled URL. An attacker can craft a phishing link and send it to a victim; if the victim clicks "Deny" on the consent page, they are silently redirected to an external site. This issue has been patched in versions 1.123.32, 2.17.4, and 2.18.1. Join the discussion | CVE Database V5 | 05/04/2026, 18:28:43 UTC Added: 05/04/2026, 18:51:26 UTC |
Showing 1 to 1 of 1 result