CVE-2026-95623 — MEDIUM (5.6)

Vulnerability Description

The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When the remote server responds with an HTTP 3xx redirect, reqwest follows the redirect internally without re-checking the new target URL against the scope. This allows an attacker who controls an allowed URL (or finds an open redirect on an allowed host) to reach disallowed destinations such as cloud metadata endpoints, localhost services, or internal network hosts.

CVSS Score

5.6

MEDIUM

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Related Weaknesses (CWE)

CWE-918

References

FAQ

What is CVE-2026-95623?

CVE-2026-95623 is a vulnerability with a CVSS score of 5.6 (MEDIUM). The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When the remote server responds with an HTTP 3xx redirect, reqwes...

How severe is CVE-2026-95623?

CVE-2026-95623 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-95623?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.