CVE-2026-54605

OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. From 0.5.5 to 1.1.5, OAuth::Consumer#token_request parses the raw Location header of a 300 to 399 redirect returned by the OAuth server and follows the redirect recursively, which can mutate the consumer's configuration and expose signed OAuth request metadata, including the Authorization header, to a cross-origin host. This issue is fixed in version 1.1.6.

• CWE-200
• CWE-346
• CWE-918

• https://github.com/ruby-oauth/oauth/commit/d069dc8c4c9631947451215f07460d6cdf0caf3f
• https://github.com/ruby-oauth/oauth/releases/tag/v1.1.6
• https://github.com/ruby-oauth/oauth/security/advisories/GHSA-prq8-7wvh-44qh
• https://github.com/ruby-oauth/oauth/security/advisories/GHSA-prq8-7wvh-44qh

Published

Jul 28, 2026

Last Modified

Jul 28, 2026

Status

Received

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54592Oj (Optimized JSON) is a JSON parser and Object marshaller p…7.5
• CVE-2026-54593Pterodactyl is a free, open-source game server management pa…8.1
• CVE-2026-5460A heap use-after-free exists in wolfSSL's TLS 1.3 post-quant…6.5
• CVE-2026-54601FastGPT is an open source AI knowledge base platform. From 4…6.3
• CVE-2026-54602FastGPT is a knowledge-based AI application platform. Prior …7.1
• CVE-2026-54603OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authoriza…8.6
• CVE-2026-54607FastGPT is a knowledge-based AI application platform. Prior …7.7
• CVE-2026-54609QTI Neon is a minimal, game-agnostic, relay-based UDP multip…8.6
• CVE-2026-54619sqlite3 provides Ruby bindings for the SQLite3 embedded data…2
• CVE-2026-5462A vulnerability was identified in Wahoo Fitness SYSTM App up…3.3
• CVE-2026-54620sqlite3 provides Ruby bindings for the SQLite3 embedded data…2
• CVE-2026-54621datamodel-code-generator generates Python data models from s…7.8