CVE-2026-55461: Snipe-IT: Open Redirect After User Edit
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the user edit flow stores url()->previous() from the attacker-controlled Referer header into Laravel’s intended URL session value and later uses redirect()->intended(...) when redirectoption=back is submitted, allowing Snipe-IT to be used as a trusted redirector after a legitimate user edit action. This issue is fixed in version 8.6.2.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-55461?
The severity of CVE-2026-55461 is classified as medium, with a score of 6.1.
How do I fix CVE-2026-55461?
To fix CVE-2026-55461, upgrade Snipe-IT to version 8.6.2 or later.
What type of vulnerability is CVE-2026-55461?
CVE-2026-55461 is an open redirect vulnerability in Snipe-IT.
What can an attacker do with CVE-2026-55461?
An attacker can manipulate the user edit flow to redirect users to malicious sites by exploiting the open redirect.
Which versions of Snipe-IT are affected by CVE-2026-55461?
Snipe-IT versions prior to 8.6.2 are affected by CVE-2026-55461.