Open Redirect in Password Manager

CVE-2026-10839

Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter the URLs generated by the application. A successful exploit could redirect authenticated users…

Vulnerability class: Open Redirect

EPSS: 0.004 (34.5th percentile) — read the EPSS interpretation.