TI-2026-34189 Aliases CVE-2026-46490 GHSA-34r5-q4jw-r36m

samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions

HIGH 77CWE-91Published 2026-06-08 · Updated 2026-06-09

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: None · High · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted into element text (e.g., <saml:AttributeValue>) are not escaped. A normal user can inject XML markup into an attribute value (e.g., email, name) and add new <saml:Attribute> elements inside the signed assertion. The IdP then signs the tampered assertion and the SP accepts the injected attributes as trusted. This allows privilege escalation when attributes are used for authorization (roles/groups). This issue has been patched in version 2.13.0.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00469 40th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed samlify (tngan): 2.13.0samlify (npm): 2.13.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
tngan	samlify	before 2.13.0	2.13.0	Patch available	CNA
—	samlify (npm)	before 2.13.0	2.13.0	Patch available	GHSA-34r5-q4jw-r36m

samlify Vendortngan Affected before 2.13.0 Fixed in 2.13.0 Patch available CNA
samlify (npm) Vendor— Affected before 2.13.0 Fixed in 2.13.0 Patch available GHSA-34r5-q4jw-r36m

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:samlify_project:samlify::::::::	before 2.13.0	Vulnerable	Samlify Project

cpe:2.3:a:samlify_project:samlify:*:*:*:*:*:*:*:* Versions before 2.13.0 Vulnerable ·Samlify Project

Remediation

Fix · CNA samlify (tngan) Fixed in 2.13.0
Fix · GHSA-34r5-q4jw-r36m samlify (npm) Fixed in 2.13.0 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-46490
2026-10-03 Alias added: GHSA-34r5-q4jw-r36m

References

TI-2025-30342 samlify SAML Signature Wrapping attack CVSS 4.0CRITICAL 9.9
TI-2017-14663 An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in… CVSS 3.0HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences