CVE-2026-66057 | Frappe up to 15.115.x/16.28.x OAuth Login Flow state redirect

October 13, 2026 Yanac

A vulnerability classified as problematic was found in Frappe up to 15.115.x/16.28.x. Affected by this issue is some unknown functionality of the component OAuth Login Flow. The manipulation of the argument state results in open redirect.

This vulnerability was named CVE-2026-66057. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More