CVE-2026-55252
Last modified
CVE-2026-55252 is a medium-severity vulnerability rated 5.1/10 on the CVSS scale. OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open redirect attacks. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open redirect attacks. This issue has been patched in version 0.17.7.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| openrundev | openrun | < 0.17.7 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-55252?
How severe is CVE-2026-55252?
How do I fix CVE-2026-55252?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-55247plone.app.event provides the event content type for Plone. P…9.1
- CVE-2026-55248plone.app.portlets provides portlets and a Plone-specific us…9.1
- CVE-2026-55249@rtk-ai/rtk-rewrite transparently rewrites shell commands ex…8.8
- CVE-2026-5525A stack-based buffer overflow vulnerability exists in Notepa…7.8
- CVE-2026-55250Maravel, a PHP framework oriented towards dependency injecti…8.7
- CVE-2026-55251NetBox Device Type Library is a collection of community-sour…6.5
- CVE-2026-55253LangChain MongoDB provides integrations between MongoDB, Atl…7.7
- CVE-2026-55254NCalc is a fast, lightweight expression evaluator for .NET. …6.5
- CVE-2026-55255Langflow is a tool for building and deploying AI-powered age…8.4
- CVE-2026-55256In parsePartHeaders of multiple files, there is a possible p…6.5
- CVE-2026-5526A security flaw has been discovered in Tenda 4G03 Pro up to …9.8
- CVE-2026-55265In multiple functions of PduParser.java, there is a possible…6.5
Are you affected by CVE-2026-55252?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST