CVE-2026-103314
Stackrox: stackrox: saml response replay allows multiple central authentication tokens
- State
- Published
- Severity
- 7.4 High
- Published
- Oct 19, 2026
- Updated
- Oct 31, 2026
- Reserved
- Sep 30, 2026
Description
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and receive distinct Central authentication tokens for the mapped identity.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.4 High | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | redhat |
Weaknesses
- CWE-294 Authentication Bypass by Capture-replay
Affected Products
| Product | Versions |
|---|---|
Red Hat Advanced Cluster Security for Kubernetes 4.10Red Hat |
|
Red Hat Advanced Cluster Security for Kubernetes 4.11Red Hat |
|
References
- RHSA-2026:85932vendor-advisory
- RHSA-2026:92342vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-103314vdb-entry
- RHBZ#2543879issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.