Skip to content
Threat Feed
Subscribe

Tag

Oauth2-Proxy

3 briefs RSS
critical advisory

OAuth2 Proxy Authentication Bypass via User-Agent Header

A critical authentication bypass vulnerability (CVE-2026-34457) exists in OAuth2 Proxy when used with `auth_request`-style integration and either `--ping-user-agent` is set or `--gcp-healthchecks` is enabled, allowing unauthenticated access to protected resources.

oauth2-proxy authentication-bypass web-application
2r 1t
critical advisory

OAuth2 Proxy Authentication Bypass via X-Forwarded-Uri Header Spoofing

OAuth2 Proxy is vulnerable to an authentication bypass when configured with `--reverse-proxy` and `--skip_auth_routes` or `--skip_auth_regex`; by spoofing the `X-Forwarded-Uri` header, an attacker can bypass authentication and access protected routes without a valid session.

OAuth2 Proxy oauth2-proxy authentication-bypass reverse-proxy header-spoofing
2r 1t
critical advisory

OAuth2 Proxy Authentication Bypass via X-Forwarded-Uri Spoofing

OAuth2 Proxy versions 7.5.0 through 7.15.1 are vulnerable to an authentication bypass where attackers can spoof the `X-Forwarded-Uri` header when `--reverse-proxy` is enabled alongside `--skip-auth-regex` or `--skip-auth-route`, allowing unauthorized access to protected resources.

OAuth2 Proxy oauth2-proxy authentication-bypass CVE-2026-40575 reverse-proxy
2r 1t 1c