CVE-2026-89042 — passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification
passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsign…
Published: 2026-09-10 · CVSS: 9.3 · CVSS 4.0
passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsigned SAML responses. Attackers can post forged SAML responses with arbitrary NameID and attributes to the assertion consumer service endpoint to receive authenticated profiles without valid signatures.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7