{"id":"CVE-2026-58490","published":"2026-11-06T20:17:23.253","lastModified":"2026-11-09T14:17:21.757","description":"Tracecat is an open-source security automation platform for teams and AI agents. From version 0.37.0 until 1.0.0-beta.49, Docker Compose deployments with SAML enabled can render SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES as empty values, overriding secure application defaults and disabling both signature requirements. An unauthenticated attacker who can reach the SAML assertion consumer endpoint can submit a forged unsigned response for an existing Tracecat user email address and obtain that user’s session. Targeting an existing superadmin can result in superadmin account takeover. Exploitation does not create users when SAML user creation is disabled and does not affect default Fargate or Helm deployments. Version 1.0.0-beta.49 removes the insecure deployment pass-through and requires signed assertions and responses.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-347"],"vendors":[],"products":[],"references":[{"url":"https://github.com/TracecatHQ/tracecat/commit/018258ba6a17c36cbfa7ca977526c34fb6afc35f","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/commit/a97aafbfd667a6b9a3b7b524e1c1bfa9d8c59779","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/commit/dab64eb7ac0eb2088783ca14f4cb2d058547bfff","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/pull/2824","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/pull/2825","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/pull/2826","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/releases/tag/1.0.0-beta.49","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/security/advisories/GHSA-6g53-h6fh-c3pj","tags":[]}],"exploitRefs":[{"url":"https://github.com/TracecatHQ/tracecat/commit/018258ba6a17c36cbfa7ca977526c34fb6afc35f","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/commit/a97aafbfd667a6b9a3b7b524e1c1bfa9d8c59779","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/commit/dab64eb7ac0eb2088783ca14f4cb2d058547bfff","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/pull/2824","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/pull/2825","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/pull/2826","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/releases/tag/1.0.0-beta.49","tags":[]},{"url":"https://github.com/TracecatHQ/tracecat/security/advisories/GHSA-6g53-h6fh-c3pj","tags":[]}],"hasPoc":true,"ai":{"summary":"A SAML configuration flaw in Tracecat (versions 0.37.0–1.0.0-beta.48) allows unauthenticated attackers to bypass signature enforcement by submitting unsigned SAML responses when SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES are set to empty values, enabling session hijacking of existing users—including superadmins—via forged assertions.","exploitability":"Exploitation is straightforward for unauthenticated attackers who can reach the SAML assertion consumer endpoint and know a valid user email address; it requires no prior access or user interaction.","blast_radius":"Successful exploitation grants full session takeover of targeted users, potentially leading to complete platform compromise if a superadmin account is hijacked, affecting confidentiality, integrity, and availability as per CVSS.","remediation":"Upgrade to Tracecat version 1.0.0-beta.49 or later, which removes the insecure deployment pass-through and enforces signed assertions and responses.","detection":"Look for SAML responses received at the assertion consumer endpoint (e.g., /saml/acs) that lack required signature elements (e.g., missing <ds:Signature> or empty Signature/Assertion elements) while the system is configured to require signatures; such malformed but accepted responses indicate exploitation attempts.","tags":["saml","auth-bypass","session-hijack","web","cloud-native"],"model":"garnet-coder","analyzedAt":"2026-11-07T09:54:04.488Z"}}