PT-2026-65538 · Ruby Oauth · Oauth

CVE-2026-54605 · Published 2026-07-28 · Updated 2026-07-28

NVD

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. From 0.5.5 to 1.1.5, OAuth::Consumer#token request parses the raw Location header of a 300 to 399 redirect returned by the OAuth server and follows the redirect recursively, which can mutate the consumer's configuration and expose signed OAuth request metadata, including the Authorization header, to a cross-origin host. This issue is fixed in version 1.1.6.

Exploit

Fix

SSRF

Information Disclosure

Origin Validation Error

Weakness Enumeration

CWE-918

CWE-200

CWE-346

Related Identifiers

CVE-2026-54605

Affected Products

Oauth

References · 4

• 🔥 https://github.com/ruby-oauth/oauth/security/advisories/GHSA-prq8-7wvh-44qh · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-54605 · Security Note
• https://github.com/ruby-oauth/oauth/releases/tag/v1.1.6 · Note
• https://github.com/ruby-oauth/oauth/commit/d069dc8c4c9631947451215f07460d6cdf0caf3f · Note