CVE-2026-49826

Concourse is a container-based automation system written in Go. Prior to version 8.2.3, an attacker is able to craft and send a user a URL that will redirect the user from the Concourse web server to any other site. This could be used in a phishing attack to steal user's credentials. This has bee...

CVE-2026-49826

Summary : CVE-2026-49826 affects Concourse prior to version 8.2.3, where an attacker can craft a URL that redirects a user from the Concourse web server to an arbitrary site (open redirect). Root cause / technical detail : The issue is tied to the login flow and is described in sources as a URL/r...