CVE-2026-25477 AFFiNE: Open Redirect via Regex Bypass in redirect-proxy
Attackers can redirect users to malicious sites via a regex bypass in the redirect-proxy endpoint of the AFFiNE workspace application.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-25477?
CVE-2026-25477 is a medium-severity vulnerability in toeverything AFFiNE, published on 2 Mar 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.26.0, there is an Open Redirect vulnerability located at the /redirect-proxy endpoint. The flaw exists in the domain validation logic, where an improperly anchored Regular Expression allows an attacker to bypass the whitelist by using malicious domains that end with a trusted string. This issue has been patched in version 0.26.0.
Weakness: CWE-601
Which versions are affected by CVE-2026-25477?
It affects 1 product.
Products include Affine Affine.
How do I fix CVE-2026-25477?
No fix has been published for CVE-2026-25477 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-25477 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-25477 exists.
Other vulnerabilities in toeverything AFFiNE
Sources
Also known as GHSA-wx9m-v7wq-g289.