CVE-2026-59151criticalCWE-287

CVE-2026-59151: fallo crítico en prowler-cloud prowler

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear prowler+ Monitorear prowler-cloud

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.6epss 0.5%
Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token, and the ACS finish logic in api/src/backend/api/v1/views.py recalculated the tenant from user.email instead of binding token issuance to the validated SAML configuration. An authenticated attacker with a controlled SAML IdP could complete a valid SAML flow for an attacker-controlled domain while asserting an email address from another configured domain, causing a SAMLToken and tenant-scoped JWT to be issued for the wrong tenant and enabling cross-tenant account takeover. This issue is fixed in version 5.30.3.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Productos afectados
prowler-cloud · prowler
CVEs relacionadas — prowler-cloud prowler

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-73263CRITICALProwler: RCE on Prowler App workers via kubeconfig auth-provider cmd-pathEPSS 0.7%CVE-2026-73264HIGHProwler: Server-Side Request Forgery (SSRF) in Lighthouse ProviderEPSS 0.4%CVE-2026-73262MEDIUMProwler: Stored XSS in HTML reports through unescaped cloud resource tagsEPSS 0.3%