Description
SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized access.
Recommendation
Update the @sap/approuter package to the latest compatible version. Followings are version details:
- Affected version(s): < 21.2.0
- Patched version(s): 21.2.0
References
Could your website be exposed too?
SmartScanner can check your website for SAP Approuter has an Open Redirect vulnerability and gives you actionable findings to investigate.
Start a free scanRelated Issues
- SAP Approuter has an Information Disclosure vulnerability - CVE-2026-58230
- @workos/authkit-session has an Open Redirect via state-derived redirect target - CVE-2026-42565
- Waku has an Open Redirect via `unstable_redirect` Helper - CVE-2026-49456
- Feathers has an open redirect in OAuth callback enables account takeover - CVE-2026-27191
You might also like:
See something that needs correcting? Let us knowUpdated September 01, 2026