EUVD-2026-50553
GHSA-4jc5-g844-4x33
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable but attacker must control a redirect endpoint (AC:H); monitoring caller is authenticated (PR:L); token theft yields high confidentiality and limited integrity impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
4DescriptionCVE.org
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0.0, lib.url.fetch() followed cross-origin redirects while forwarding caller-supplied credential headers other than Authorization and Cookie, allowing a malicious redirect-capable server to receive headers such as X-Auth-Token from authenticated monitoring requests. This issue is fixed in version 6.0.0.
AnalysisAI
Cross-origin credential header leakage in linuxfabrik-lib prior to v6.0.0 exposes API tokens from authenticated monitoring requests to attacker-controlled redirect targets. The lib.url.fetch() function relied on httpx's default redirect behavior, which strips only Authorization and Cookie on cross-origin hops - leaving custom credential headers like X-Auth-Token and X-Api-Key forwarded verbatim to whatever host the redirect points to. This is particularly severe for Redfish/BMC monitoring workflows where X-Auth-Token grants privileged hardware management access. No public exploit has been identified at time of analysis, and active exploitation is not confirmed in CISA KEV.
Technical ContextAI
The vulnerability resides in url.py of linuxfabrik-lib, the shared Python utility library consumed by Linuxfabrik monitoring-plugins (CPE: cpe:2.3:a:linuxfabrik:monitoring-plugins:*:*:*:*:*:*:*:*). The library wraps httpx for HTTP requests. httpx's built-in cross-origin redirect handling strips Authorization and Cookie by specification (RFC 7235/6265), but treats all other headers - including application-defined credential headers - as safe to forward. Because monitoring plugins routinely attach non-standard tokens (e.g., Redfish's X-Auth-Token, generic X-Api-Key) to requests targeting BMC or infrastructure APIs, a server-side redirect can silently exfiltrate those tokens. CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) describes the root cause: the library lacked a deny-by-default header allowlist for cross-origin redirect hops, allowing implicit disclosure of caller-supplied secrets. The fix introduces _install_safe_redirect_stripping(), which installs a custom httpx redirect hook that retains only a narrow set of benign transport headers (_REDIRECT_SAFE_HEADERS) and strips everything else the caller provided.
RemediationAI
Upgrade linuxfabrik-lib to version 6.0.0 or later, which resolves the issue by installing a safe redirect hook that strips all caller-supplied headers except a fixed allowlist of benign transport headers (Accept, Content-Type, User-Agent, etc.) on any cross-origin redirect. The patched release is available at https://github.com/Linuxfabrik/lib/releases/tag/v6.0.0 and the fixing commit is https://github.com/Linuxfabrik/lib/commit/6573ff9347e541200305d278d2663d2e54e052ff. If immediate upgrade is not possible, a targeted workaround is to restrict the monitoring server's egress via firewall rules so that HTTP redirects can only resolve to pre-approved monitoring target subnets - this prevents an attacker-controlled redirect destination from being reachable. A secondary option is to configure monitored endpoints to disallow 3xx redirects at the application layer; note this may break legitimate monitoring flows that depend on redirects for load balancing or authentication handoffs. Disabling redirect following entirely in lib.url.fetch() calls is the most complete workaround but may require plugin-level code changes.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today