Flaw in Central SAML Authentication for Red Hat Advanced Cluster Security for Kubernetes
CVE-2026-103314

7.4HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Advanced Cluster Security 4
Vendor
CVE Published:
19 October 2026

What is CVE-2026-103314?

A vulnerability exists in Red Hat Advanced Cluster Security for Kubernetes where the Central SAML authentication ACS endpoint fails to retain SAML assertion or response identifiers. This oversight allows an attacker with access to a valid, unexpired signed SAML response to repeatedly submit it, thereby obtaining multiple distinct Central authentication tokens for the same identity. The repeated usage of these tokens compromises the integrity of the authentication process, potentially exposing the system to unauthorized access.

References

https://access.redhat.com/security/cve/CVE-2026-103314
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2543879
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Austin Chu (U.C. Berkeley), Corban Villa (U.C. Berkeley), and Sohee Kim (U.C. Berkeley) for reporting this issue.
.