CVE-2026-15615: SAML <Conditions> element not validated

SAML <Conditions> element not validated

Status

Published

2026-07-23

Updated

2026-07-27

Assigning organization

certcc

Description

Logto omits validation of the SAML <Conditions> element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Logto Logto

1.12.0 to ≤ 1.37.1affected

References

https://github.com/logto-io/logto/blob/ea3ede35028dfd0bbb6d7b239623ce0e7f6cdff8/packages/core/src/sso/SamlConnector/utils.ts#L175-L205 ↗
https://github.com/logto-io/logto/blob/ea3ede35028dfd0bbb6d7b239623ce0e7f6cdff8/packages/connectors/connector-saml/src/utils.ts#L46-L110 ↗