CVE-2026-112040: diem-project diem Sign-In BasedmUserActions.class.php redirect
A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unknown part of the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php of the component Sign-In. This manipulation of the argument Referer causes open redirect. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attack can be performed remotely by manipulating the Referer argument used by the Sign-In component. User interaction is required, consistent with the CVSS UI:R assessment.
Are default deployments affected?
The available information does not state whether the vulnerable Referer handling is enabled or reachable in a default deployment. The affected code is identified as dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php in diem versions up to commit 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.
Is a fixed version available?
No affected or updated release versions are specified because the project uses a rolling-release model. The project was reportedly notified through an issue report but had not responded at the time of publication.
How urgent is remediation?
The issue is rated medium severity with a 4.3 CVSS score and can enable an attacker-controlled redirect, which may support phishing or redirection to untrusted sites. Public exploit disclosure is reported, so deployments using the affected Sign-In code should be reviewed.