CVE-2026-89043criticalCWE-347

CVE-2026-89043: fallo crítico en krakenjs passport-saml-encrypted

passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending

Publicada el

Seguir esta CVE+ Monitorear passport-saml-encrypted

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 0.3%
passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and assertion extraction use independent XPath lookups with no cross-validation. Attackers holding any validly signed SAML message can prepend a forged unsigned assertion that gets accepted as the verified identity while the genuine signature validates against the original assertion.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Productos afectados
krakenjs · passport-saml-encrypted
CVEs relacionadas — krakenjs passport-saml-encrypted

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-89042CRITICALpassport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature VerificationEPSS 0.4%