Medium severityNVD Advisory· Published Oct 1, 2026· Updated Oct 16, 2026

CVE-2026-55252

Description

OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open redirect attacks. This issue has been patched in version 0.17.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/openrundev/openrunGo	< 0.17.7	0.17.7

Affected products

Openrun/openrunllm-fuzzy
Range: <0.17.7
osv-coords
pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0
Range: < 0.0.20260723T184607-160000.1.1

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-h5g6-xmh4-hc37ghsaADVISORY
github.com/openrundev/openrun/commit/709da784fcf1311c85f30f3542cfa3601a78bbf0nvdWEB
github.com/openrundev/openrun/releases/tag/v0.17.7nvdWEB
github.com/openrundev/openrun/security/advisories/GHSA-h5g6-xmh4-hc37nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000