Critical Authentication Bypass Vulnerabilities Found in Casdoor IAM Platform (CERT/CC VU#780781)
The bagel they save for the regulars. Don't skim, savour.
Summary
Casdoor versions 2.362.0 and earlier contain critical identity and access management vulnerabilities in SAML processing, account binding, and token exchange mechanisms. These flaws allow attackers to bypass authentication, impersonate users, bypass multifactor authentication (MFA), forge and replay assertions, and achieve persistent unauthorized access. The vulnerabilities affect the open-source IAM platform and enable broad authentication bypass and privilege escalation.
Key quotes
· 3 pulledCasdoor versions 2.362.0 and earlier contain several identity and access management vulnerabilities that enable broad authentication bypass and privilege escalation.
An attacker able to interact with Casdoor's authentication interface may impersonate users, bypass multifactor authentication (MFA), forge and replay assertions, and achieve persistent unauthorized access.
These flaws relate to Casdoor's Security Assertion Markup Language (SAML) processing, account binding, and token exchange mechanisms.
You might also wanna read
Critical Flaws Found in HashiCorp Vault and CyberArk Conjur Enable Remote Code Execution
Researchers discovered 14 logic flaws in HashiCorp Vault and CyberArk Conjur, two widely used open-source credential management systems. The
csoonline.com·9mo ago
Critical Authentication Bypass Vulnerability Discovered in cPanel & WHM (CVE-2026-41940)
watchTowr Labs reports on a critical authentication bypass vulnerability (CVE-2026-41940) in cPanel & WHM, a widely-used web hosting control
labs.watchtowr.com·1mo ago
Vercel Security Breach: OAuth Supply Chain Attack Exposes Platform Environment Variable Risks
A security breach at Vercel exposed how a compromised third-party OAuth application provided long-term access to internal systems, bypassing
trendmicro.com·1mo ago
Cyata Research Uncovers Zero-Day Flaws in HashiCorp Vault's Authentication and Authorization
The article discusses a comprehensive assessment conducted by Cyata's research team on HashiCorp Vault, a widely used tool for storing crede
cyata.ai·9mo ago