Critical severity9.1NVD Advisory· Published May 28, 2026· Updated Jun 17, 2026
CVE-2026-9090
CVE-2026-9090
Description
Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate. The buildSpCertificateStore function extracts the X.509 certificate directly from the incoming SAMLResponse instead of using the trusted pre-configured Identity Provider certificate, allowing an attacker to forge assertions signed with an attacker-controlled key.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/casdoor/casdoorGo | <= 1.1000.1-0.20260321120606-239e8bd69487 | — |
Affected products
3- osv-coordsRange: < 0.0.20260723T184607-160000.1.1
Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-fwgq-j9r9-qjgrghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-9090ghsaADVISORY
- kb.cert.org/vuls/id/780781nvdWEB
News mentions
2- ⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and MoreThe Hacker News · Jun 1, 2026
- Casdoor: Nine SAML & SSO Flaws Disclosed, Including Critical Auth Bypass (CVE-2026-9090)Vypr Intelligence · May 28, 2026