Live › vulnerability › CVE-2026-103314
Go to dashboardRed Hat Advanced Cluster Security for Kubernetes (RHACS) Central does not record SAML assertion or response IDs, so a valid signed SAML response can be submitted repeatedly. Each submission yields a fresh Central authentication token for the mapped user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only deployments of RHACS Central that authenticate users through SAML are described as affected. Installations using other login methods, such as local users or OIDC, are not covered by this description.
No product ranges from the sources yet.
roxctl version or the version shown in the Central UI; compare against the fixed release in Red Hat's advisory (unknown from the sources).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and receive distinct Central authentication tokens for the mapped identity.
This page as .md · .json · in your agent: get_signal("CVE-2026-103314")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.