xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 3 fixed, 1 without a fix
Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-347.
Summary
xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. The vulnerability allows an attacker to modify a valid signed XML message in a way that still passes signature verification checks. For example, it could be used to alter critical identity or access control attributes, enabling an attacker to escalate privileges or impersonate another user. Users of versions 6.0.0 and prior should upgrade to version 6.0.1 to receive a fix. Those who are still using v2.x or v3.x should upgrade to patched versions 2.1.6 or 3.2.1, respectively.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| node-saml | xml-crypto | 4.0.0 to before 6.0.1; 3.0.0 to before 3.2.1; before 2.1.6 | 6.0.1, 3.2.1, 2.1.6 | Patch available | CNA |
| — | xml-crypto (npm) | 4.0.0 to before 6.0.1 | 6.0.1 | Patch available | GHSA-x3m8-899r-f7c3 |
| — | xml-crypto (npm) | 3.0.0 to before 3.2.1 | 3.2.1 | Patch available | GHSA-x3m8-899r-f7c3 |
| — | xml-crypto (npm) | before 2.1.6 | 2.1.6 | Patch available | GHSA-x3m8-899r-f7c3 |
- xml-crypto Vendornode-saml Affected 4.0.0 to before 6.0.1; 3.0.0 to before 3.2.1; before 2.1.6 Fixed in 6.0.1, 3.2.1, 2.1.6 Patch available CNA
- xml-crypto (npm) Vendor— Affected 4.0.0 to before 6.0.1 Fixed in 6.0.1 Patch available GHSA-x3m8-899r-f7c3
- xml-crypto (npm) Vendor— Affected 3.0.0 to before 3.2.1 Fixed in 3.2.1 Patch available GHSA-x3m8-899r-f7c3
- xml-crypto (npm) Vendor— Affected before 2.1.6 Fixed in 2.1.6 Patch available GHSA-x3m8-899r-f7c3
Remediation
- Fix · CNA xml-crypto (node-saml) Fixed in 6.0.1, 3.2.1, 2.1.6
- Fix · GHSA-x3m8-899r-f7c3 xml-crypto (npm) Fixed in 6.0.1 Advisory →
- Fix · GHSA-x3m8-899r-f7c3 xml-crypto (npm) Fixed in 3.2.1 Advisory →
- Fix · GHSA-x3m8-899r-f7c3 xml-crypto (npm) Fixed in 2.1.6 Advisory →
Red Hat 3 advisories
- RHSA-2025:7626 Released 2025-05-14 · Red Hat rating ImportantRed Hat Developer Hub 1.6.0 release.
- Red Hat Developer Hub 1.6 registry.redhat.io/rhdh/rhdh-hub-rhel9
- RHSA-2025:3595 Released 2025-04-03 · Red Hat rating ImportantRed Hat Developer Hub 1.4.3 release.
- Red Hat Developer Hub (RHDH) 1.4 registry.redhat.io/rhdh/rhdh-hub-rhel9
- RHSA-2025:3374 Released 2025-03-27 · Red Hat rating ImportantRed Hat Developer Hub 1.5.1 release.
- Red Hat Developer Hub 1.5 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| OpenShift Serverless | Affected | No fix planned: Will not fix |
| Red Hat Developer Hub (RHDH) 1.4 | Fixed | RHSA-2025:3595 |
| Red Hat Developer Hub 1.5 | Fixed | RHSA-2025:3374 |
| Red Hat Developer Hub 1.6 | Fixed | RHSA-2025:7626 |
Not affected: 3 products
- Red Hat Developer Hub (RHDH) 1.4
- Red Hat Developer Hub 1.5
- Red Hat Developer Hub 1.6
Timeline
- 2026-10-02 Threatist record created from CVE-2025-29775
- 2026-10-03 Alias added: GHSA-x3m8-899r-f7c3
References
Other 9
- https://github.com/node-saml/xml-crypto/security/advisories/GHSA-x3m8-899r-f7c3
- https://github.com/node-saml/xml-crypto/commit/28f92218ecbb8dcbd238afa4efbbd50302aa9aed
- https://github.com/node-saml/xml-crypto/commit/886dc63a8b4bb5ae1db9f41c7854b171eb83aa98
- https://github.com/node-saml/xml-crypto/commit/8ac6118ee7978b46aa56b82cbcaa5fca58c93a07
- https://github.com/node-saml/xml-crypto/releases/tag/v2.1.6
- https://github.com/node-saml/xml-crypto/releases/tag/v3.2.1
- https://github.com/node-saml/xml-crypto/releases/tag/v6.0.1
- https://github.com/node-saml/xml-crypto
- https://workos.com/blog/samlstorm
More node-saml vulnerabilities
- TI-2024-21829 XML signature verification bypass due improper verification of signature / signature spoofing CVSS 3.1CRITICAL 10.0
- TI-2025-21186 xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References CVSS 4.0CRITICAL 9.3
- TI-2025-34225 Node-SAML Contains SAML Signature Verification Vulnerability CVSS 3.1CRITICAL 10.0
- TI-2025-34181 Node-SAML SAML Authentication Bypass CVSS 4.0CRITICAL 9.3
Sources
- CVE-2025-29775 · CVE Program
- CVE-2025-29775 · NVD
- FIRST EPSS
- GHSA-x3m8-899r-f7c3 · GitHub Advisory Database · CC BY 4.0
- CVE-2025-29775 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences