CVE-2026-40574— OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims

OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Prior to 7.15.2, an authorization bypass exists in OAuth2 Proxy as part of the email_domain enforcement option. An attacker may be able to authenticate with an email claim such as attacker@evil.com@company.com and satisfy an allowed domain check for company.com, even though the claim is not a valid email address. The issue ONLY affects deployments that rely on email_domain restrictions and accept email claim values from identity providers or claim mappings that do not strictly enforce normal email syntax. This vulnerability is fixed in 7.15.2.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

授权机制不正确

OAuth2 Proxy 安全漏洞

OAuth2 Proxy是OAuth2 Proxy组织的一款能够提供与Google、Github或其他提供商进行身份验证的反向代理。 OAuth2 Proxy 7.15.2之前版本存在安全漏洞，该漏洞源于email_domain强制执行选项存在授权绕过，可能导致攻击者使用类似attacker@evil.com@company.com的电子邮件声明通过允许的域检查。

N/A

N/A