CVE-2026-50090
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching. This is an instance of CWE-1289: Improper Validation of Unsafe Equivalence in Input.
Risk Assessment
An attacker can redirect users to a malicious site, potentially leading to credential or session theft, and compromising data confidentiality and integrity.
Recommendation
Immediately update the domain validation logic in the OAuth endpoint to enforce strict matching of allowed domains and prevent redirect bypass.
Original NVD description (English source)
The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of "CWE-1289: Improper Validation of Unsafe Equivalence in Input" and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N (9.3 Critical).