oauth2 proxy project vulnerabilities

Products

• oauth2 proxy 13

Latest oauth2 proxy project CVEs

Newest publication first

1. CVE-2026-40575 OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing

   Published 2026-04-21

   Critical·CVSS 9.1 EPSS 0.48%

   OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 may trust a client-supplied X-Forwarded-Uri header when --reverse-proxy is enabled and --skip-auth-regex or --skip-auth-route is configured. An attacker can spoof th...

2. CVE-2026-41059 OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex

   Published 2026-04-21

   High·CVSS 8.2 EPSS 0.27%

   OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configuration-dependent authentication bypass. Deployments are affected when all of the following are true: Use of skip_auth_routes or the legacy skip_auth_re...

3. CVE-2026-40574 OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims

   Published 2026-04-21

   Medium·CVSS 6.8 EPSS 0.21%

   OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Prior to 7.15.2, an authorization bypass exists in OAuth2 Proxy as part of the email_domain enforcement option. An attacker may be able to authenticate with an email claim such as attacker@evil.c...

4. CVE-2026-34457 OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth_request Mode

   Published 2026-04-14

   Critical·CVSS 9.1 EPSS 0.49%

   OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions prior to 7.15.2 contain a configuration-dependent authentication bypass in deployments where OAuth2 Proxy is used with an auth_request-style integration (such as nginx auth_request) and...

5. CVE-2026-34454 OAuth2 Proxy: Session cookie not cleared when rendering sign-in page

   Published 2026-04-14

   Low·CVSS 3.5 EPSS 0.19%

   OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. A regression introduced in 7.11.0 prevents OAuth2 Proxy from clearing the session cookie when rendering the sign-in page. In deployments that rely on the sign-in page as part of their logout flow...

6. CVE-2025-54576 OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion

   Published 2025-07-30

   Critical·CVSS 9.1 EPSS 1.2%

   OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions 7.10.0 and below, oauth2-proxy deployments are vulnerable when using the skip_auth_routes co...

7. CVE-2021-21411 Incorrect authorization in OAuth2-Proxy

   Published 2021-03-26

   Medium·CVSS 5.5 EPSS 1.1%

   OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. The --gitlab-group flag for group-based authorization in the GitLab provider stopped working in the v7.0.0 release. Regardless of the flag settings, authorization was...

8. CVE-2021-21291 Subdomain checking of whitelisted domains could allow unintended redirects

   Published 2021-02-02

   Medium·CVSS 6.1 EPSS 1.6%

   OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain or group. In OAuth2 Proxy before version 7.0.0, for users that use the whitelist domain feature, a d...

9. CVE-2020-4037 Open Redirect in OAuth2 Proxy

   Published 2020-06-29

   Medium·CVSS 5.4 EPSS 0.90%

   In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This is expected to be the original URL that the user was trying to access. This redirect UR...

10. CVE-2020-11053 Open Redirect in OAuth2 Proxy

    Published 2020-05-07

    Medium·CVSS 6.1 EPSS 0.79%

    In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This is expected to be the original URL that the user was trying to access. This redi...

11. CVE-2020-5233 Open Redirect in OAuth2 Proxy

    Published 2020-01-30

    Medium·CVSS 6.1 EPSS 1.3%

    OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.

12. CVE-2017-1000069 Cross-site Request Forgery (CSRF)

    Published 2017-07-13

    High·CVSS 8.8 EPSS 0.74%

    CSRF in Bitly oauth2_proxy 2.1 during authentication flow

13. CVE-2017-1000070 Open Redirect in oauth2_proxy

    Published 2017-07-13

    Medium·CVSS 6.1 EPSS 1.00%

    The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.