CVE-2021-41826: Place Placeos Authentication

Medium severity, CVSS 6.1. EPSS: 12.1% chance of exploitation in the next 30 days.

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessions_controller.rb open redirect.

Affected products

• Place Placeos Authentication: before 1.29.10.0 (fixed in 1.29.10.0)

Published 2021-09-30. Last modified 2026-06-17.