CVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker Compose

Summary

CVE-2026-58490 affects Tracecat from version 0.37.0 up to 1.0.0-beta.49 in Docker Compose deployments with SAML enabled. The Docker Compose setup can render SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES as empty values, disabling both signature requirements. An unauthenticated attacker who can reach the SAML assertion consumer endpoint can submit a forged unsigned response for an existing user's email and obtain that user's session, including superadmin takeover. Exploitation does not create users when SAML user creation is disabled, and default Fargate or Helm deployments are not affected.

Mitigation

Version 1.0.0-beta.49 removes the insecure deployment pass-through and requires signed assertions and responses.

Topics

• AI agents

Related items

• MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News
• MediumCVE-2026-118046: JS Help Desk plugin stored DOM-based cross-site scripting via jsticket_messageSimilar attack · NVD/CVE Database
• MediumARTEX abuse expands as cybercriminals target financial sectorSimilar attack · Microsoft Security Blog
• MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
• MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database