https://vulnerability.circl.lu/sightings/feed 2026-09-26T06:39:58.622769+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5df3a1d5-e25d-4d67-998f-1abb98c3a9ea/export 2026-09-26T06:39:58.649666+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5df3a1d5-e25d-4d67-998f-1abb98c3a9ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57175", "type": "seen", "source": "https://gist.github.com/alon710/ba52991aa97f84cbc1e3af1670cfe08e", "content": "# CVE-2026-57175: CVE-2026-57175: Improper Authentication in social-auth-core SAML Backend\n\n> **CVSS Score:** 6.4\n> **Published:** 2026-09-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-57175\n\n## Summary\nAn improper authentication vulnerability (CWE-287) exists in the SAML backend of the social-auth-core package before version 5.0.0. The Assertion Consumer Service (ACS) endpoint does not verify whether incoming SAML assertions match a previously initiated AuthnRequest in the user's session. This permits an attacker with credentials on a shared Identity Provider to perform a 'Session Donor' attack, permanently linking their SAML identity to an authenticated victim's account and achieving full, persistent account takeover.\n\n## TL;DR\nThe social-auth-core SAML backend failed to validate the InResponseTo attribute in SAML responses against the local session. This allows attackers to link their own external SAML identity to a victim's active session, gaining complete and permanent access to the victim's account.\n\n## Technical Details\n\n- **CWE ID**: CWE-287\n- **Attack Vector**: AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N\n- **CVSS Score**: 6.4 (Medium)\n- **EPSS Score**: Not Available\n- **Impact**: Account Takeover / Unauthorized Identity Mapping\n- **Exploit Status**: No public exploit available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- social-auth-core (PyPI package)\n- **social-auth-core**: < 5.0.0 (Fixed in: `5.0.0`)\n\n## Mitigation\n\n- Upgrade social-auth-core to version 5.0.0 or higher\n- Disable SAML account association flows\n- Remove SAML from authentication backends\n\n**Remediation Steps:**\n1. Identify current social-auth-core installation version\n2. Execute 'pip install --upgrade social-auth-core>=5.0.0'\n3. Verify session-based transaction state configuration\n4. Audit existing SAML account associations for duplicate mappings\n\n## References\n\n- [GitHub Advisory GHSA-vq6g-g6c7-5f2j](https://github.com/python-social-auth/social-core/security/advisories/GHSA-vq6g-g6c7-5f2j)\n- [NVD CVE-2026-57175 Detailed Information](https://nvd.nist.gov/vuln/detail/CVE-2026-57175)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-57175) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-25T01:30:32.000000Z"} 2026-09-25T01:30:32+00:00