Open Redirect Vulnerability in Search Guard FLX

Publication date: 2026-03-31

Last updated on: 2026-04-03

Assigner: floragunn GmbH

Description

In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-31

Last Modified

2026-04-03

Generated

2026-07-06

AI Q&A

2026-03-31

EPSS Evaluated

2026-07-05

NVD

CVE-2026-4799

EUVD

EUVD-2026-17474

Affected Vendors & Products

Vendor	Product	Version / Range
search-guard	flx	to 4.1.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-601	The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Search Guard FLX up to version 4.0.1 and allows an attacker to use specially crafted requests to redirect a user to an untrusted URL.

Impact Analysis

The vulnerability can impact you by causing users to be redirected to potentially malicious or untrusted websites, which could lead to phishing attacks or exposure to harmful content.

Hi! I’m here to help you understand CVE-2026-4799. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70