{"data":{"id":"53f70bb4-30d5-4e13-9827-ce2bed6a31fc","title":"CVE-2026-58490: Tracecat is an open-source security automation platform for teams and AI agents. From version 0.37.0 until…","summary":"CVE-2026-58490 affects Tracecat from version 0.37.0 up to 1.0.0-beta.49 in Docker Compose deployments with SAML enabled. The Docker Compose setup can render SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES as empty values, disabling both signature requirements. An unauthenticated attacker who can reach the SAML assertion consumer endpoint can submit a forged unsigned response for an existing user's email and obtain that user's session, including superadmin takeover. Exploitation does not create users when SAML user creation is disabled, and default Fargate or Helm deployments are not affected.","solution":"Version 1.0.0-beta.49 removes the insecure deployment pass-through and requires signed assertions and responses.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-58490","publishedAt":"2026-11-06T20:17:23.253Z","cveId":"CVE-2026-58490","cweIds":["CWE-347"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Tracecat"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Tracecat SAML authentication bypass through unsigned responses in Docker Compose","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-11-07T00:12:12.808Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-07T00:12:15.759Z","patchAvailable":null,"disclosureDate":"2026-11-06T20:17:23.253Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[]}}