CVE-2026-59180
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A vulnerability in Apprise library before version 1.11.0 causes HTTP-based notification plugins and HTTP attachment/config loaders to follow HTTP redirects by default and resend user-configured auth headers and query parameters. This allows a compromised trusted destination or on-path attacker to capture secrets like Authorization headers, bearer tokens, custom headers, and service keys.
Risk Assessment
The organization risks exposure of sensitive authentication credentials and API keys, potentially leading to unauthorized access to external services and data breaches.
Recommendation
Immediately update Apprise to version 1.11.0 or later, which fixes the issue by preventing resending of authentication data on HTTP redirects.
Original NVD description (English source)
Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. Prior to 1.11.0, Apprise HTTP-based notification plugins and HTTP attachment and config loaders in apprise/attachment/http.py and apprise/config/http.py follow HTTP redirects by default and resend user-configured auth headers and query parameters on the redirected request, allowing a compromised trusted destination or on-path attacker to receive secrets such as Authorization headers, bearer tokens, custom headers, and service keys. This issue is fixed in version 1.11.0.