CVE-2026-101152

Summary

A flaw in the SSO login flow allows attackers to redirect authentication responses to attacker-controlled URLs instead of CloudVision, potentially enabling unauthorized access to user accounts. This represents a significant risk to identity provider security.

Exploitability

Exploitation requires crafting a malicious URL and tricking a user into clicking it, making it moderately difficult but achievable through social engineering with no privileged access requirements.

Blast radius

If exploited, attackers could gain access to user accounts across the CloudVision platform, potentially compromising sensitive network management data and operations.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable SSO login functionality until a patched version is available, or implement strict URL validation for all SSO redirect endpoints.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.