CVE-2026-66414: Leantime Open Redirect in Login Controller via redirectUrl Parameter
Leantime 3.6.2 contains an open redirect vulnerability in the Login controller that allows unauthenticated attackers to redirect authenticated users to arbitrary external sites by manipulating the redirectUrl POST parameter. Attackers can craft a malicious login URL with a tampered redirectUrl value that bypasses FILTERSANITIZEURL validation to redirect victims to attacker-controlled sites for phishing or credential theft.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-66414?
CVE-2026-66414 has a medium severity rating of 6.1.
How does CVE-2026-66414 affect my application?
CVE-2026-66414 allows unauthenticated attackers to redirect authenticated users to arbitrary external sites.
How do I fix CVE-2026-66414?
To fix CVE-2026-66414, validate and sanitize the redirectUrl parameter in the Login controller.
Who is affected by CVE-2026-66414?
Leantime versions prior to 3.6.2 are affected by CVE-2026-66414.
What steps can I take to mitigate CVE-2026-66414?
To mitigate CVE-2026-66414, implement strict validation of user inputs and use a whitelist of allowed redirect URLs.