{"id":"CVE-2026-53669","title":"react-router: React Router: Open Redirect vulnerability via backslashes in navigation components (CVE-2026-53669)","summary":"A flaw was found in React Router, a routing library for React applications. A remote attacker could exploit this vulnerability by crafting a malicious link that uses backslashes within the <Link> or useNavigate components. This could lead …","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvssSource":"vendor","cwe":"CWE-601","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","affected":["cryostat 4","exploit_intelligence","gatekeeper 3","migration_toolkit_for_applications 8","migration_toolkit_for_containers","migration_toolkit_for_virtualization","multicluster_engine_for_kubernetes","network_observability_operator","node_healthcheck_operator","openshift_lightspeed","openshift_pipelines","openshift_service_mesh 3","advanced_cluster_management_for_kubernetes 2","advanced_cluster_security 4","amq_broker 7","ansible_automation_platform 2","build_of_apache_camel_hawtio 4","build_of_apache_camel_for_spring_boot 4","build_of_apicurio_registry 3","build_of_keycloak","build_of_podman_desktop","ceph_storage 5","ceph_storage 9","connectivity_link 1","data_grid 8","developer_hub","discovery 2","edge_manager 1","enterprise_linux 10","enterprise_linux 8","enterprise_linux 9","hardened_images","jboss_enterprise_application_platform 8","jboss_enterprise_application_platform_expansion_pack","openshift_ai_rhoai","openshift_container_platform 4","openshift_data_foundation 4","openshift_dev_spaces","openshift_distributed_tracing 3","openshift_gitops"],"patched":["hardened_images"],"published":"2026-07-27","updated":"2026-10-16","sourceUpdated":"2026-10-16T11:23:40+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53669.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53669.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-53669"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507843"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53669"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53669"},{"url":"http://github.com/remix-run/react-router/pull/15176"},{"url":"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180"},{"url":"https://github.com/remix-run/react-router/pull/15176"},{"url":"https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0"},{"url":"https://github.com/remix-run/react-router/security/advisories/GHSA-wrjc-x8rr-h8h6"},{"url":"https://access.redhat.com/errata/RHSA-2026:48780"},{"url":"https://access.redhat.com/errata/RHSA-2026:48799"},{"url":"https://github.com/advisories/GHSA-wrjc-x8rr-h8h6"}],"tags":["csaf","vex","red-hat","ghsa","npm"],"epss":0.00319,"epssPercentile":0.24693,"aliases":["GHSA-wrjc-x8rr-h8h6"],"ecosystem":"npm","ingestedAt":"2026-07-23T20:19:19.502Z","slug":"CVE-2026-53669","body":"## Overview\n\nA flaw was found in React Router, a routing library for React applications. A remote attacker could exploit this vulnerability by crafting a malicious link that uses backslashes within the <Link> or useNavigate components. This could lead to an Open Redirect, allowing the attacker to redirect users to arbitrary external websites, potentially for phishing or other malicious purposes.\n\n## Vendor advisories\n\n- **RHSA-2026:48780** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-07-30 · [advisory](https://access.redhat.com/errata/RHSA-2026:48780)\n- **RHSA-2026:48799** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-07-30 · [advisory](https://access.redhat.com/errata/RHSA-2026:48799)\n- **Red Hat VEX** · Moderate · affected: Cryostat 4, Exploit Intelligence, Gatekeeper 3, Migration Toolkit for Applications 8, Migration Toolkit for Containers, Migration Toolkit for Virtualization, … · no fix planned: Cryostat 4, Exploit Intelligence, Gatekeeper 3, Migration Toolkit for Applications 8, … · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53669.json)\n\n**react-router: React Router: Open Redirect vulnerability via backslashes in navigation components** — rated Moderate by Red Hat. Released 2026-07-27, updated 2026-10-16.\n\nAffected:\n\n- Cryostat 4\n- Exploit Intelligence\n- Gatekeeper 3\n- Migration Toolkit for Applications 8\n- Migration Toolkit for Containers\n- Migration Toolkit for Virtualization\n- Multicluster Engine for Kubernetes\n- Network Observability Operator\n- Node HealthCheck Operator\n- OpenShift Lightspeed\n- OpenShift Pipelines\n- OpenShift Service Mesh 3\n- Red Hat Advanced Cluster Management for Kubernetes 2\n- Red Hat Advanced Cluster Security 4\n- Red Hat AMQ Broker 7\n- Red Hat Ansible Automation Platform 2\n- Red Hat build of Apache Camel - HawtIO 4\n- Red Hat build of Apache Camel for Spring Boot 4\n- Red Hat build of Apicurio Registry 3\n- Red Hat Build of Keycloak\n- Red Hat Build of Podman Desktop\n- Red Hat Ceph Storage 5\n- Red Hat Ceph Storage 9\n- Red Hat Connectivity Link 1\n- Red Hat Data Grid 8\n- Red Hat Developer Hub\n- Red Hat Discovery 2\n- Red Hat Edge Manager 1\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat Hardened Images\n- Red Hat JBoss Enterprise Application Platform 8\n- Red Hat JBoss Enterprise Application Platform Expansion Pack\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenShift Container Platform 4\n- Red Hat Openshift Data Foundation 4\n- Red Hat OpenShift Dev Spaces\n- Red Hat OpenShift distributed tracing 3\n- Red Hat OpenShift GitOps\n\nFixed:\n\n- Red Hat Hardened Images\n\nNo fix planned:\n\n- Cryostat 4\n- Exploit Intelligence\n- Gatekeeper 3\n- Migration Toolkit for Applications 8\n- Migration Toolkit for Containers\n- Migration Toolkit for Virtualization\n- Multicluster Engine for Kubernetes\n- Network Observability Operator\n- Node HealthCheck Operator\n- OpenShift Lightspeed\n- OpenShift Pipelines\n- OpenShift Service Mesh 3\n- Red Hat Advanced Cluster Management for Kubernetes 2\n- Red Hat Advanced Cluster Security 4\n- Red Hat AMQ Broker 7\n- Red Hat Ansible Automation Platform 2\n- Red Hat build of Apache Camel - HawtIO 4\n- Red Hat build of Apache Camel for Spring Boot 4\n- Red Hat build of Apicurio Registry 3\n- Red Hat Build of Keycloak\n- Red Hat Build of Podman Desktop\n- Red Hat Ceph Storage 5\n- Red Hat Ceph Storage 9\n- Red Hat Connectivity Link 1\n- Red Hat Data Grid 8\n- Red Hat Developer Hub\n- Red Hat Discovery 2\n- Red Hat Edge Manager 1\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat Hardened Images\n- Red Hat JBoss Enterprise Application Platform 8\n- Red Hat JBoss Enterprise Application Platform Expansion Pack\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenShift Container Platform 4\n- Red Hat Openshift Data Foundation 4\n- Red Hat OpenShift Dev Spaces\n- Red Hat OpenShift distributed tracing 3\n- Red Hat OpenShift GitOps\n\n## Remediation\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/ https://access.redhat.com/errata/RHSA-2026:48780\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/ https://access.redhat.com/errata/RHSA-2026:48799\n\nWorkarounds / mitigations:\n\n- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\n## Package advisory (CVE-2026-53669)\n\nAffected packages:\n\n- `react-router >= 6.0.0, < 7.18.0`\n\nPatched in:\n\n- `react-router 7.18.0`\n\nSource: https://github.com/advisories/GHSA-wrjc-x8rr-h8h6","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":213506,"id":"CVE-2026-53669","ts":1790754746614,"field":"cvss","old":null,"new":"5.4"}]}