Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.new Create a CVE report
Check your stack
CVE-2026-83589medium6.1

Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect

Impact

Oauth-proxy has an open redirect vulnerability via a specially crafted link, potentially leading to phishing attacks or credential theft. A remote attacker can exploit this by enticing a user to follow the link after authenticating. The affected product is Red Hat OpenShift Container Platform, but the exact affected versions are unclear.

Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.

What to do

Red Hat has not identified any known mitigations for this issue. Customers are advised to apply the available security update when released.

redhat guidance

Affected packages

This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.

Affected products

Vendor version evidence. Product records are separate from automatic dependency matching.

Red Hat · redhat

Red Hat OpenShift Container Platform 4.12

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1792974337 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.12::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.14

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1791837363 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.14::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.15

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1791632336 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.15::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.16

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1792878232 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.16::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.18

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1790882320 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.18::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.19

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1790807096 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.19::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.20

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1790704224 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.20::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.21

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1790706478 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.21::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.22

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1790724885 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.22::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 5

0 ranges
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

unknown

Other versions: unaffected

Product identifiers (CPE)cpe:/a:redhat:openshift:5

Original source description

A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (rd) during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an arbitrary external website after authenticating. This open redirect can be leveraged to conduct phishing attacks or credential theft.

Inside the record

Evidence available

Package identity · not supplied
Version evidence
Remediation guidance
Weakness classification
Additional publishers

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2026-83589

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Underlying weaknesses

The source’s classification of what caused the vulnerability.

CWE-601 ↗

URL Redirection to Untrusted Site ('Open Redirect')

redhat

Related →
Contributing organizations · 2
redhat

Assigning organization

2026-10-30
CISA-ADP

Additional data publisher

2026-10-01

What changed

Follow changes
  1. CVE · CVE-2026-83589

    Observed 2026-10-30T04:31:40.059Z · upstream updated 2026-10-30T04:25:38.534Z

    Product or version evidence changed

    before

    [
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.12",
    "platforms": [],
    "versions": [
      {
        "version": "1792974337",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.12::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.14",
    "platforms": [],
    "versions": [
      {
        "version": "1791837363",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.15",
    "platforms": [],
    "versions": [
      {
        "version": "1791632336",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.15::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.16",
    "platforms": [],
    "versions": [
      {
        "version": "1792878232",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.16::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.18",
    "platforms": [],
    "versions": [
      {
        "version": "1790882320",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.19",
    "platforms": [],
    "versions": [
      {
        "version": "1790807096",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.20",
    "platforms": [],
    "versions": [
      {
        "version": "1790704224",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.20::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.21",
    "platforms": [],
    "versions": [
      {
        "version": "1790706478",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.21::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.22",
    "platforms": [],
    "versions": [
      {
        "version": "1790724885",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.22::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  }
]

    after

    [
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.12",
    "platforms": [],
    "versions": [
      {
        "version": "1792974337",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.12::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.14",
    "platforms": [],
    "versions": [
      {
        "version": "1791837363",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.15",
    "platforms": [],
    "versions": [
      {
        "version": "1791632336",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.15::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.16",
    "platforms": [],
    "versions": [
      {
        "version": "1792878232",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.16::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.18",
    "platforms": [],
    "versions": [
      {
        "version": "1790882320",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.19",
    "platforms": [],
    "versions": [
      {
        "version": "1790807096",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.20",
    "platforms": [],
    "versions": [
      {
        "version": "1790704224",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.20::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.21",
    "platforms": [],
    "versions": [
      {
        "version": "1790706478",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.21::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.22",
    "platforms": [],
    "versions": [
      {
        "version": "1790724885",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.22::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 5",
    "platforms": [],
    "versions": [],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:openshift:5"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-83589"
  }
]

Large field values are marked as truncated previews. Original source snapshots remain retained.

Showing up to 50 most recent observed changes.

References

11 sources
access.redhat.com/errata/RHSA-2026:74380
vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:74383
vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:74429
vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:79039
vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:79169
vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:82785
vendor-advisoryredhat
View 5 more references
access.redhat.com/errata/RHSA-2026:82813
vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:89715
vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:90274
vendor-advisoryredhat
access.redhat.com/security/cve/CVE-2026-83589
vdb-entryredhat
bugzilla.redhat.com/show_bug.cgi
issue-trackingredhat