CVE-2026-89042

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-89042
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89042.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89042
Published
2026-09-10T17:39:32Z
Modified
2026-09-13T03:30:32Z
Severity
  • 9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification
Details

passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsigned SAML responses. Attackers can post forged SAML responses with arbitrary NameID and attributes to the assertion consumer service endpoint to receive authenticated profiles without valid signatures.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-347"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89042.json"
}
References

Affected packages

Git / github.com/krakenjs/passport-saml-encrypted

Affected ranges

Type
GIT
Repo
https://github.com/krakenjs/passport-saml-encrypted
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
1ab28eb11928d66d50af8f231ccb71f7c1923fda
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.1.13"
        },
        {
            "fixed": "0.1.13"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Affected versions

v0.*
v0.0.2
v0.0.3
v0.0.4
v0.1.0
v0.1.1
v0.1.10
v0.1.11
v0.1.12
v0.1.13-beta.1
v0.1.3
v0.1.4
v0.1.5
v0.1.6
v0.1.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89042.json"