Unsafe JSONP callback injection in OAuthLib RevocationEndpoint
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Partial Red Hat: 2 fixed, 32 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-79.
Summary
OAuthLib from 0.6.1 before 4.0.0 reflects an unvalidated callback parameter into RevocationEndpoint responses when enable_jsonp is True. The callback is not restricted to a legal JavaScript function name (CWE-79), so a browser application that loads the response as trusted JSONP and lets attackers influence the callback can run attacker-controlled JavaScript in its origin. Exploitation requires user interaction, and the JSONP feature is disabled by default.
Written with Claude Haiku 5.5 from the sources below · 2026-11-05
Description from the CNA
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's RevocationEndpoint in oauthlib/oauth2/rfc6749/endpoints/revocation.py reflects an unvalidated callback request parameter into success and error response bodies when enable_jsonp=True. The callback can come from the query string or request body and is used without restricting it to a legal JavaScript function name. A browser application that loads the revocation response as trusted JSONP and permits attacker influence over callback can therefore execute attacker-controlled JavaScript in the including application's origin, with access to its DOM and script-accessible data. The feature is disabled by default, so only deployments that explicitly enable JSONP are affected. This issue is fixed in version 4.0.0.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| oauthlib | oauthlib | 0.6.1 to before 4.0.0 | 4.0.0 | Patch available | CNA |
| — | oauthlib (PyPI) | 0.6.1 to before 4.0.0 | 4.0.0 | Patch available | GHSA-hj66-6f7g-4r5v |
- oauthlib Vendoroauthlib Affected 0.6.1 to before 4.0.0 Fixed in 4.0.0 Patch available CNA
- oauthlib (PyPI) Vendor— Affected 0.6.1 to before 4.0.0 Fixed in 4.0.0 Patch available GHSA-hj66-6f7g-4r5v
Remediation
Upgrade oauthlib to version 4.0.0 on PyPI or in the oauthlib product. Red Hat AI Inference Server 3.5 is fixed by RHSA-2026:82368 and RHSA-2026:82415, and Red Hat Enterprise Linux AI 3.5 is fixed by RHSA-2026:92449 and RHSA-2026:92452. The sources list no fixed version for Confidential Compute Attestation, Fence Agents Remediation Operator, Lightspeed Core, Lightspeed Services for Advanced Cluster Management, Migration Toolkit for Applications 8, and other products.
Written with Claude Haiku 5.5 from the sources below · 2026-11-05
- Fix · CNA oauthlib (oauthlib) Fixed in 4.0.0
- Fix · GHSA-hj66-6f7g-4r5v oauthlib (PyPI) Fixed in 4.0.0 Advisory →
Red Hat 4 advisories
- RHSA-2026:92452 Released 2026-10-29 · Red Hat rating CriticalRed Hat Enterprise Linux AI 3.5.2 enhancement update
- Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
- RHSA-2026:92449 Released 2026-10-29 · Red Hat rating CriticalRed Hat Enterprise Linux AI 3.5.2 enhancement update
- Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
- RHSA-2026:82415 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (cpu)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cpu-rhel9
Show 1 more Red Hat advisories
- RHSA-2026:82368 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (cuda)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cuda-rhel9
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Confidential Compute Attestation | Affected | No fix yet: Fix deferred |
| Fence Agents Remediation Operator | Affected | No fix yet: Fix deferred |
| Lightspeed Core | Affected | No fix yet: Fix deferred |
| Lightspeed Services for Advanced Cluster Management | Affected | No fix yet: Fix deferred |
| Migration Toolkit for Applications 8 | Affected | No fix yet: Fix deferred |
| Migration Toolkit for Containers | Affected | No fix yet: Fix deferred |
| Migration Toolkit for Virtualization | Affected | No fix yet: Fix deferred |
| OpenShift Lightspeed | Affected | No fix yet: Fix deferred |
| OpenShift Service Mesh 3 | Affected | No fix yet: Fix deferred |
| Pen Drive Powered by Red Hat Lightspeed | Affected | No fix yet: Fix deferred |
| Red Hat AI Inference Server | Affected | No fix yet: Fix deferred |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Affected | No fix yet: Fix deferred |
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet: Fix deferred |
| Red Hat Ceph Storage 4 | Affected | No fix yet: Fix deferred |
| Red Hat Ceph Storage 7 | Affected | No fix yet: Fix deferred |
| Red Hat Ceph Storage 8 | Affected | No fix yet: Fix deferred |
| Red Hat Ceph Storage 9 | Affected | No fix yet: Fix deferred |
| Red Hat Discovery 2 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 10 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 8 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 9 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Virtualization 4 | Affected | No fix yet: Fix deferred |
| Red Hat OpenStack Platform 16.2 | Affected | No fix yet: Fix deferred |
| Red Hat OpenStack Platform 17.1 | Affected | No fix yet: Fix deferred |
| Red Hat OpenStack Platform 18.0 | Affected | No fix yet: Fix deferred |
| Red Hat Quay 3 | Affected | No fix yet: Fix deferred |
| Red Hat Satellite 6 | Affected | No fix yet: Fix deferred |
| Self-service automation portal 2 | Affected | No fix yet: Fix deferred |
| Service Telemetry Framework 1.5 | Affected | No fix yet: Fix deferred |
| Red Hat AI Inference Server 3.5 | Fixed | RHSA-2026:82368, RHSA-2026:82415 |
| Red Hat Enterprise Linux AI 3.5 | Fixed | RHSA-2026:92449, RHSA-2026:92452 |
Not affected: 2 products
- Red Hat Enterprise Linux AI 3.5
- Red Hat Lightspeed Services for OCP
Timeline
- 2026-10-13 Threatist record created from CVE-2026-49264
- 2026-10-13 Alias added: GHSA-hj66-6f7g-4r5v
- 2026-10-13 2 new references · GHSA-hj66-6f7g-4r5v
- 2026-10-14 Fix available: RHSA-2026:82368 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82415 · Red Hat
- 2026-10-14 Priority changed: MEDIUM → LOW
- 2026-10-15 Fix available: Red Hat AI Inference Server 3.5 · Red Hat
- 2026-10-18 CISA SSVC decision points changed
- 2026-10-18 Priority changed: LOW → MEDIUM
- 2026-10-30 Fix available: RHSA-2026:92452 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:92449 · Red Hat
- 2026-10-30 Fix available: Red Hat Enterprise Linux AI 3.5 · Red Hat
- 2026-10-30 Affected versions changed · Red Hat
References
Other 6
- https://github.com/oauthlib/oauthlib/security/advisories/GHSA-hj66-6f7g-4r5v
- https://github.com/oauthlib/oauthlib/pull/951
- https://github.com/oauthlib/oauthlib/commit/c888359f3c42bec235b2c5caab2069c9ed62457c
- https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0
- https://github.com/oauthlib/oauthlib
- https://github.com/pypa/advisory-database/tree/main/vulns/oauthlib/PYSEC-2026-4113.yaml
More oauthlib vulnerabilities
- TI-2026-85670 Missing device code check in OAuthLib lets callers get bearer tokens CVSS 3.1HIGH 8.5
- TI-2026-82213 OAuthLib token grants can authorize with another client's identity CVSS 4.0HIGH 8.4
- TI-2026-71761 Timing side channel in OAuthLib PKCE code_verifier comparison CVSS 3.1MEDIUM 6.8
Sources
- CVE-2026-49264 · CVE Program
- CVE-2026-49264 · NVD
- FIRST EPSS
- GHSA-hj66-6f7g-4r5v · GitHub Advisory Database · CC BY 4.0
- CVE-2026-49264 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences