SAML Assertion Replay Vulnerability in Snipe-IT Software by Grokability

CVE-2026-116201

What is CVE-2026-116201?

Snipe-IT, prior to version 8.5.0, is susceptible to a SAML assertion replay vulnerability due to a flaw in the nonce check implemented within the SAML ACS handler. This allows attackers to resend captured SAML assertions, enabling them to gain unauthorized access to multiple user sessions simultaneously. By sending simultaneous POST requests to the /saml/acs endpoint using a single captured assertion, attackers can bypass Identity Provider (IdP) revocation mechanisms, compromising the security of user accounts.

References