samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.7epss 0.5%
from disclosure to weapon22 days
Published on NVDJun 8
1st PoC+22d
exploitation probability
0.5%top 62% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted into element text (e.g., <saml:AttributeValue>) are not escaped. A normal user can inject XML markup into an attribute value (e.g., email, name) and add new <saml:Attribute> elements inside the signed assertion. The IdP then signs the tampered assertion and the SP accepts the injected attributes as trusted. This allows privilege escalation when attributes are used for authorization (roles/groups). This issue has been patched in version 2.13.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
tngan · samlifypublic PoCs found — 1
githubgithub.com/BiiTts/CVE-2026-46490-samlify-SAML-Attribute-Injection★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.