Aqara OAuth redirect_uri validation bypass

Aqara's login system allows attackers to redirect users to fake websites by bypassing domain validation checks. This lets attackers steal login credentials or session tokens from unsuspecting users.

The OAuth Authorization Endpoint at open-cn.aqara.com/oauth/authorize fails to properly validate redirect_uri parameters, allowing attackers to bypass domain matching controls (CWE-1289). An unauthenticated attacker can craft a malicious authorization request that redirects authenticated users to attacker-controlled domains, enabling credential harvesting and session hijacking with only user interaction required.