Skip to content
OpenAdvisories

Vendor

TracecatHQ

1 known vulnerabilities.

Products

tracecat 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-58490

    Tracecat: Unsigned SAML response accepted in Docker Compose SAML deployments due to empty signing defaults

    Tracecat is an open-source security automation platform for teams and AI agents. From version 0.37.0 until 1.0.0-beta.49, Docker Compose deployments with SAML enabled can render SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES as empty values, overriding secu…

    TracecatHQ tracecat