CVE-2026-40575 - Vulnerability Analysis

Overview

OAuth2 Proxy 7.5.0 through 7.15.1 contains an authentication bypass caused by trusting client-supplied X-Forwarded-Uri header when --reverse-proxy and skip-auth rules are enabled, letting unauthenticated remote attackers access protected routes, exploit requires specific proxy and skip-auth configuration.

Severity & Score

Impact

Unauthenticated remote attackers can bypass authentication and access protected routes without a valid session.

Mitigation

Upgrade to version 7.15.2 or later; alternatively, strip or overwrite X-Forwarded-Uri headers and restrict direct client access.

References

• https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-7x63-xv5r-3p2x

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner