CVE-2026-50089: Aqara IAM/SSO Gateway open redirect
The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (6.1 Medium), which can be used to set up a phishing attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict access to the Aqara IAM/SSO Gateway (gw-builder.aqara.com) to trusted networks and management hosts only (e.g., firewall rules, VPN, or IP allowlist) to reduce exposure of the open-redirect endpoint.
- Compensating control
Deploy WAF or reverse-proxy rules to detect and block requests that contain redirect parameters pointing to external or untrusted domains (block or sanitize redirect URL parameters).
- Compensating control
If feasible and until a vendor fix or safe configuration is available, isolate or disable public access to the affected gateway (take the service offline or restrict it to an internal network) to prevent abuse.
- Operational
Monitor web server and application logs for requests containing redirect parameters and suspicious patterns; investigate and block offending IPs or user agents and retain logs for incident analysis.
- Operational
Notify administrators and end users about the phishing risk from open redirects originating from gw-builder.aqara.com; advise users not to follow unexpected redirects and to verify links before clicking.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-50089?
CVE-2026-50089 has a medium severity rating of 6.1.
What type of vulnerability is CVE-2026-50089?
CVE-2026-50089 is an open redirect vulnerability classified as CWE-601.
How can CVE-2026-50089 be exploited?
CVE-2026-50089 can be exploited to facilitate phishing attacks by redirecting users to untrusted sites.
Which software is affected by CVE-2026-50089?
The vulnerability affects the Aqara IAM/SSO Gateway.
What mitigations are available for CVE-2026-50089?
To mitigate CVE-2026-50089, users should avoid clicking on untrusted URL redirects from the Aqara IAM/SSO Gateway.