Vulnerabilityhigh
CVE-2026-94212: Apache APISIX: unauthenticated impersonation issue in saml-auth
AI summary · grok-4.7Summaries by Vani AI
Default Apache APISIX saml-auth lets unauthenticated attackers impersonate any user (CVE-2026-94212).
CVE-2026-94212 affects Apache APISIX 3.17.0 through 3.18.0 and is rated CVSS 4.0 6.4. The saml-auth plugin fails to properly verify cryptographic signatures. Under the default configuration, an unauthenticated attacker can impersonate any user on every route protected by saml-auth. The post does not say the flaw is being exploited.
Key facts
- CVE-2026-94212 is rated CVSS 4.0 6.4 (medium).
- Affects Apache APISIX 3.17.0 through 3.18.0.
- saml-auth improperly verifies cryptographic signatures.
- Default configuration allows impersonation of any protected user.
- CVEs
- CVE-2026-94212
- Vendors
- Apache Software Foundation
- Products
- Apache APISIX
- Organizations
- Apache Software Foundation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-94212 | Signature verification flaw enables impersonation in Apache APISIX | 6.4 | — |
From the original article
Posted by Abhishek Choudhary on Oct 01 Severity: CVSS 4. 0: 6. 4 (medium) CVSS:4.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.