CVE-2026-9566 Details
Description
A vulnerability was identified in teableio teable up to 1.9.x. This impacts an unknown function of the file apps/nextjs-app/src/features/auth/pages/LoginPage.tsx of the component Sign-up. The manipulation of the argument redirect leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Upgrading to version release.2026-04-21T08-57-20Z.1513 will fix this issue. The affected component should be upgraded. The vendor confirms: "The default branch of teableio/teable is develop, and the reported login redirect issue has already been fixed there. The login redirect flow now validates the redirect parameter with isValidRedirectPath() before navigation, which blocks javascript:, data:, and cross-origin redirects."
A cross-site scripting (XSS) vulnerability has been identified in Teable's authentication component, specifically in versions through 1.9.x. The issue arises in the LoginPage.tsx file, where the application improperly validates the 'redirect' URL parameter. This flaw allows attackers to inject malicious scripts that are executed in the context of the user's browser after logging in. The vulnerability can be exploited remotely, and while it requires user interaction, such as clicking a link, the injected script can perform actions on behalf of the user or steal sensitive information.
Users should upgrade to Teable version release.2026-04-21T08-57-20Z.1513, where this vulnerability has been fixed. The update is available on the Teable GitHub releases page.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 26, 2026CISA-ADP
Assessed May 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/TrebledJ/98575dc5aecb47433f02ff942e6aedf1 | [email protected] | ExploitTechnical Analysis |
| https://github.com/Teableio/Teable/ | [email protected] | Source CodeVendor |
| https://github.com/Teableio/Teable/pull/2827 | [email protected] | Source CodeVendor |
| https://github.com/teableio/teable/releases/tag/release.2026-04-21T08-57-20Z.1513 | [email protected] | Release NotesVendor |
| https://vuldb.com/submit/815798 | [email protected] | Permission Required |
| https://vuldb.com/vuln/365628 | [email protected] | AdvisoryPermission RequiredRemedy |
| https://vuldb.com/vuln/365628/cti | [email protected] | AdvisoryPermission Required |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| teableio teable | <= 1.9.x |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 26, 2026 | New CVE Received | [email protected] |