CVE-2026-58066

9.8 Critique

Publiée le 30/07/2026 à 08:25 · Modifiée le 25/08/2026 à 20:12 · Analysée par le NVD · Source : support@hackerone.com

Description

Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML signatures but did not bind the validated signature to samlp:Response / saml:Assertion. An attacker could submit a wrapped document carrying forged identity attributes alongside any valid signature made by the trusted IdP certificate, and log in as an arbitrary user.

Traduire en français

Produits concernés

Rocket.Chat
Rocket.chat rocket.chat

Scores CVSS

Version	Score	Source	Vecteur
3.0	9.8 Critique	support@hackerone.com	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-287

Références

https://github.com/RocketChat/Rocket.Chat/pull/41233 Issue Tracking
https://hackerone.com/reports/3827674 Third Party AdvisoryIssue Tracking

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories