high8.6
CVE-2025-46573
Passport-wsfed-saml2 allows SAML Authentication Bypass via Attribute Smuggling
Impact
### Overview This vulnerability allows an attacker to impersonate any user during SAML authentication by tampering with a valid SAML response. This can be done by adding attributes to the response. ### Am I Affected? You are affected by this SAML Attribute Smuggling vulnerability if you are using `passport-wsfed-saml2` version 4.6.3 or below, specifically under the following conditions: 1. The service provider is using `passport-wsfed-saml2`, 2. A valid SAML Response signed by the Identity Provider can be obtained ### Fix Upgrade to v4.6.4 or greater.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | passport-wsfed-saml2 | >= 3.0.5, <= 4.6.3 | 4.6.4 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/auth0/passport-wsfed-saml2/commit/e5cf3cc2a53748207f7a81bfba9195c8efa94181
- https://github.com/auth0/passport-wsfed-saml2/security/advisories/GHSA-8gqj-226h-gm8r
- https://github.com/advisories/GHSA-8gqj-226h-gm8r
- https://nvd.nist.gov/vuln/detail/CVE-2025-46573