CVE-2026-46490 samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions

What is CVE-2026-46490?

CVE-2026-46490 is a high-severity code injection vulnerability in tngan samlify, published on 8 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted into element text (e.g., <saml:AttributeValue>) are not escaped. A normal user can inject XML markup into an attribute value (e.g., email, name) and add new <saml:Attribute> elements inside the signed assertion. The IdP then signs the tampered assertion and the SP accepts the injected attributes as trusted. This allows privilege escalation when attributes are used for authorization (roles/groups). This issue has been patched in version 2.13.0.

Weakness: CWE-91

Which versions are affected by CVE-2026-46490?

2 open source packages ship an affected version, including samlify. It affects 1 product.

Products include Samlify Project Samlify.

How do I fix CVE-2026-46490?

Upgrade samlify to 2.13.0 or later.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2026-46490 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-46490 exists.

Public exploit code: 1 proofs of concept on GitHub.

Other vulnerabilities in tngan samlify

• CVE-2025-47949 samlify SAML Signature Wrapping attack Critical 9.9
• CVE-2017-1000452 Samlify vulnerable to Authentication Bypass by allowing tokens to be reused with different usernames High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-34r5-q4jw-r36m, MINI-23f5-3fxq-p65m, MINI-9mcc-3mf4-rghp, MINI-hr54-82fj-cxr6, ROOT-APP-NPM-CVE-2026-46490.