CVE-2026-103314

CVE-2026-103314 · Stackrox: stackrox: saml response replay allows multiple central authentication tokens

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and receive distinct Central authentication tokens for the mapped identity.

CVSS 7.4 · High · EPSS 0.4%

Published

2026-10-19T12:14:27.338Z

Updated

2026-10-20T21:30:42.326Z

Check your server →