CVE-2026-16336
A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirect_uri results in open redirect. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
- Score
- CVSS 4.0 5.3 Medium
- Status
- Deferred - cna@vuldb.com
- Published
- 2026-07-21
- Last modified
- 2026-10-24
- Weaknesses
- CWE-601
Affected products
References
- https://vuldb.com/vuln/380710
- https://vuldb.com/vuln/380710/cti
- https://vuldb.com/cve/CVE-2026-16336
- https://vuldb.com/submit/858687
- https://github.com/trinodb/trino/issues/29754
- https://github.com/trinodb/trino/
