CVE-2025-57800

CVE-2025-57800 affects Audiobookshelf (versions 2.6.0–2.26.3) where OIDC redirect callbacks are not properly restricted, allowing an attacker to craft a login link that stores an arbitrary callback in a cookie. The attacker can cause a 302 redirect to an attacker-controlled URL after authenticati...