THREAT OPS › Threat News › [GHSA] GHSA-2wvm-8mvp-22qv (medium) — Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none
[GHSA] GHSA-2wvm-8mvp-22qv (medium) — Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none
GHSA-2wvm-8mvp-22qv Severity: medium CVE: CVE-2026-55834
Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none
### Summary The OIDC authorization page in the pocket-id frontend redirects the browser to an attacker-controlled URL without consulting the backend redirect_uri allow-list when the request uses prompt=none. An attacker who knows a vali
MITRE ATT&CK techniques
- JavaScriptT1059.007
Indicators of compromise
- CVE-2026-55834cve
- https://idp.victim.example/authorize?client_id=url
- https://attacker.example/collect&response_type=code&scope=openid&prompt=noneurl
- https://attacker.example/collect?error=login_required&state=url
- https://attacker.example/collecturl
Original source: https://github.com/advisories/GHSA-2wvm-8mvp-22qv