---
id: "CVE-2026-87951"
kind: "vulnerability"
aliases: ["CVE-2026-87951"]
title: "Drupal SAML SSO Service Provider: stored sensitive data retrievable from embedded storage"
severity: "low"
cvss: 3.8
epss: 0.00196
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["drupal", "package", "saml-sso", "self-hosted"]
not_affected_if: ["module-not-installed"]
published_at: "2026-10-22T02:17:04+00:00"
first_seen_at: "2026-10-23T21:57:30+00:00"
updated_at: "2026-10-25T04:43:13+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87951", "first_seen_at": "2026-10-23T21:57:30+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-87951", "first_seen_at": "2026-10-24T07:15:52+00:00"}]
---

# Drupal SAML SSO Service Provider: stored sensitive data retrievable from embedded storage

The Drupal SAML SSO - Service Provider module stores sensitive information insecurely, so data embedded in its storage can be retrieved. The sources say the affected versions run from 0.0.0 to 3.2.0 and do not describe which data or how it is reached.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of the Drupal SAML SSO - Service Provider module with `drush pm:list --filter=saml` and compare it to the affected range up to `3.2.0`.

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-87951
- 2026-10-24T07:15:52+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-87951

## From the sources

Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider  allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider  versions: from 0.0.0 to 3.2.0.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_