Vulnerability Details CVE-2026-33213
Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash's authentication module stripped the scheme and netloc from user-supplied next parameters but did not normalize multiple leading slashes, allowing a crafted login URL such as /login?next=////evil.com to redirect users to an external attacker-controlled site after authentication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 23.6%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2026-33213
-
cpe:2.3:a:redash:redash:10.0.0
-
cpe:2.3:a:redash:redash:10.1.0
-
cpe:2.3:a:redash:redash:23.09.0
-
cpe:2.3:a:redash:redash:23.10.0
-
cpe:2.3:a:redash:redash:23.11.0
-
cpe:2.3:a:redash:redash:23.12.0
-
cpe:2.3:a:redash:redash:24.01.0
-
cpe:2.3:a:redash:redash:24.02.0
-
cpe:2.3:a:redash:redash:24.03.0
-
cpe:2.3:a:redash:redash:24.04.0
-
cpe:2.3:a:redash:redash:24.05.0
-
cpe:2.3:a:redash:redash:24.06.0
-
cpe:2.3:a:redash:redash:24.07.0
-
cpe:2.3:a:redash:redash:24.08.0
-
cpe:2.3:a:redash:redash:24.08.1
-
cpe:2.3:a:redash:redash:24.09.0
-
cpe:2.3:a:redash:redash:24.10.0
-
cpe:2.3:a:redash:redash:24.11.0
-
cpe:2.3:a:redash:redash:24.12.0
-
cpe:2.3:a:redash:redash:25.01.0
-
cpe:2.3:a:redash:redash:25.02.0
-
cpe:2.3:a:redash:redash:25.03.0
-
cpe:2.3:a:redash:redash:25.04.0
-
cpe:2.3:a:redash:redash:25.05.0
-
cpe:2.3:a:redash:redash:25.06.0
-
cpe:2.3:a:redash:redash:25.07.0
-
cpe:2.3:a:redash:redash:25.08.0
-
cpe:2.3:a:redash:redash:25.09.0
-
cpe:2.3:a:redash:redash:25.10.0
-
cpe:2.3:a:redash:redash:25.11.0
-
cpe:2.3:a:redash:redash:25.12.0
-
cpe:2.3:a:redash:redash:26.01.0
-
cpe:2.3:a:redash:redash:26.02.0
-
cpe:2.3:a:redash:redash:26.03.0
-
cpe:2.3:a:redash:redash:5.0.2
-
cpe:2.3:a:redash:redash:6.0.0
-
cpe:2.3:a:redash:redash:7.0.0
-
cpe:2.3:a:redash:redash:8.0.0
-
cpe:2.3:a:redash:redash:9.0.0