CVE-2026-92116

9.1Critical

Published 12 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

9.1Critical

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: High impact on confidentiality, integrity
Weakness: CWE-601

Impact

Remote attackers can abuse the OAuth1 callback mechanism to redirect users or hijack authentication tokens without prior privileges. Network access to the Allura application is all that is required.

Root cause

Improper URL validation on the OAuth1 callback endpoint allows open redirection or authorization token leakage.

Affected systems

Apache Allura through 1.21.0

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Fix & remediation

Upgrade Apache Allura to version 1.22.0 or later. No interim workaround or configuration mitigation is documented.

shell

$ pip install --upgrade 'allura>=1.22.0'

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

OAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-92116