Read the docs
TI-2026-30656 Aliases CVE-2026-42354GHSA-rcmw-7mc7-3rj7

Sentry: Improper authentication on SAML SSO process allows user identity linking

Priority MEDIUM 50CWE-290Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-290.

Summary

Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementation of Sentry. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the same Sentry instance. The victim email address must be known in order to exploit this vulnerability. This issue has been patched in version 26.4.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00623 50th percentileScored 2026-11-07
Fix Fixed sentry (getsentry): 26.4.1sentry (PyPI): 26.4.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
getsentrysentry21.12.0 to before 26.4.126.4.1Patch availableCNA
—sentry (PyPI)21.12.0 to before 26.4.126.4.1Patch availableGHSA-rcmw-7mc7-3rj7
  • sentry Vendorgetsentry Affected 21.12.0 to before 26.4.1 Fixed in 26.4.1 Patch available CNA
  • sentry (PyPI) Vendor— Affected 21.12.0 to before 26.4.1 Fixed in 26.4.1 Patch available GHSA-rcmw-7mc7-3rj7

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:sentry:sentry:*:*:*:*:*:*:*:*21.12.0 to before 26.4.1VulnerableSentry
  • cpe:2.3:a:sentry:sentry:*:*:*:*:*:*:*:* Versions 21.12.0 to before 26.4.1 Vulnerable ·Sentry

Remediation

  • Fix · CNA sentry (getsentry) Fixed in 26.4.1
  • Fix · GHSA-rcmw-7mc7-3rj7 sentry (PyPI) Fixed in 26.4.1 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-42354
  2. 2026-10-03 Alias added: GHSA-rcmw-7mc7-3rj7
  3. 2026-10-25 EPSS moved to the below the 50th percentile
  4. 2026-11-04 EPSS moved to the 50th–90th percentile

References

Patch 2

Advisory 2

Other 2

  • TI-2026-21018 Sentry allows unauthorized access to event data across organizational boundaries CVSS 4.0MEDIUM 5.7
  • TI-2026-78982 Sentry-Javascript: Middleware Bypass when using Tunnel route CVSS 4.0CRITICAL 9.1
  • TI-2025-16094 Improper authentication on SAML SSO process allows user impersonation in sentry CVSS 3.1CRITICAL 9.1
  • TI-2023-25212 Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint CVSS 3.1CRITICAL 9.3
  • TI-2026-21634 Sentry: Improper Authentication on SAML SSO process allows user identity linking CVSS 3.1CRITICAL 9.1
  • TI-2026-37904 Sentry: Inefficient Regular Expression Complexity in sentry CVSS 3.1HIGH 7.5
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences