CVE-2026-103314

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and receive distinct Central authentication tokens for the mapped identity.

CVSS 3.1

7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-25)

CWE

CWE-294

Published

2026-10-19

Modified

2026-10-20

Record from

the NVD, synced 2026-10-21

References

• https://access.redhat.com/errata/RHSA-2026:85932
• https://access.redhat.com/security/cve/CVE-2026-103314
• https://bugzilla.redhat.com/show_bug.cgi?id=2543879

Check your stackJSON