CVE-2026-16336
Received Received - Intake

Open Redirect in Trino OAuth2/OIDC Implementation

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: VulDB

Description
A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirect_uri results in open redirect. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-16336
EUVD
EUVD-2026-46147

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
trinodb trino 481

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-601 The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Trino's OAuth2/OIDC authentication mechanism. It involves manipulation of the redirect_uri parameter, which is dynamically constructed from untrusted request context without proper server-side validation. Attackers can alter this parameter to influence the callback URI sent to the Identity Provider (IDP), potentially redirecting authorization codes to attacker-controlled endpoints.

Detection Guidance

To detect this vulnerability, monitor OAuth2/OIDC authentication flows for unexpected redirect_uri values. Check logs for requests with manipulated Host, X-Forwarded-Host, or X-Forwarded-Proto headers. Inspect network traffic for callback URIs pointing to external domains. Use tools like Wireshark or tcpdump to capture HTTP requests containing redirect_uri parameters.

Impact Analysis

If exploited, this vulnerability could allow attackers to intercept authorization codes during OAuth2/OIDC authentication flows. This may lead to unauthorized access to user accounts or sensitive data, depending on the permissions granted via the OAuth flow. The impact depends on the IDP's validation rules and the attacker's ability to manipulate forwarded headers.

Compliance Impact

This vulnerability could lead to unauthorized data access or exposure, violating confidentiality requirements in GDPR and HIPAA. Compliance may be impacted if user data is compromised due to the open redirect flaw, potentially resulting in data breaches and regulatory penalties.

Mitigation Strategies
  • Configure a strict allowlist of trusted callback URIs in Trino's OAuth2/OIDC settings, including scheme, host, port, and path.
  • Disable or sanitize untrusted forwarded headers (Host, X-Forwarded-Host, X-Forwarded-Proto) before they influence the redirect_uri.
  • Update Trino to the latest patched version once available.
  • Restrict OAuth client credentials to trusted Identity Providers only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16336. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart