CVE-2026-80200CWE-601

CVE-2026-80200

Medium · published August 26, 2026

CVSS v3.1
4.7
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect destinations. Attackers with IdP access can supply malicious RelayState values to redirect authenticated users to attacker-controlled URLs for credential theft or phishing attacks.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
0.0 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00360 · 28.6th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-08-26T09:18Z
References (2)
https://github.com/kimai/kimai/security/advisories/GHSA-3jp4-mhh4-gcgr · [email protected]https://www.vulncheck.com/advisories/kimai-before-2.53.0-open-redirect-via-relaystate · [email protected]
EPSS history
Timeline
  • 27 AUG 06:47Z
    EPSS moved — → 0%
    epss
  • 25 AUG 23:19Z
    Kimai before 2.53.0 Open Redirect via RelayState
    cvelistv5