CLEANSTART-2026-OX06426: Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication

Q: What attacker interaction is required for exploitation?

The attacker needs to cause a user to interact with the affected authentication flow. No attacker privileges are required, and the issue is reachable over the network.

Q: What is the likely impact if exploitation succeeds?

After successful authentication, the user can be redirected to an attacker-controlled URL. The supplied vector indicates low confidentiality and integrity impact, with no availability impact.

Published Nov 11, 2026

Updated

Security vulnerability affects the wso2am package. Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication.

Affected Software

1 affected componentFixes available

cleanstart/wso2am<4.7.0-r5

4.7.0-r5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/wso2am to a version that resolves this vulnerability.
Fixed in 4.7.0-r5

Event History

Nov 11, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-79650

Frequently Asked Questions

What attacker interaction is required for exploitation?

The attacker needs to cause a user to interact with the affected authentication flow. No attacker privileges are required, and the issue is reachable over the network.

What is the likely impact if exploitation succeeds?

After successful authentication, the user can be redirected to an attacker-controlled URL. The supplied vector indicates low confidentiality and integrity impact, with no availability impact.

CLEANSTART-2026-OX06426: Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What attacker interaction is required for exploitation?

What is the likely impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What attacker interaction is required for exploitation?

What is the likely impact if exploitation succeeds?