CVE-2026-101090 | nezhahq Nezha up to 2.2.3 OAuth2 Redirect Endpoint oauth2.go dashboard_host redirect (EUVD-2026-88025)

A vulnerability labeled as problematic has been found in nezhahq Nezha up to 2.2.3. The affected element is an unknown function of the file cmd/dashboard/controller/oauth2.go of the component OAuth2 Redirect Endpoint. Such manipulation of the argument dashboard_host leads to open redirect.

This vulnerability is documented as CVE-2026-101090. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More