CVE-2026-28415

[CVE catalog]

Severity

Medium · CVSS 4.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Published

Feb 27, 2026, 9:44:51 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.29% · Oct 25, 2026

A flaw was found in Gradio, an open-source Python package. The _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter. A remote attacker can exploit this vulnerability by crafting a malicious URL, leading to an open redirect. This allows the attacker to redirect users to arbitrary external websites, potentially enabling phishing attacks or other forms of user manipulation. This MODERATE impact vulnerability in Gradio's OAuth flow allows for open redirection due to an unvalidated `_target_url` query parameter. Red Hat products utilizing Gradio with OAuth enabled, such as the `ansible-chatbot-service`, may be affected if running vulnerable versions. Exploitation requires user interaction with the `/logout` or `/login/callback` endpoints. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.