Replay Attack Vulnerability in Armeria-SAML by LINE

CVE-2026-11749

What is CVE-2026-11749?

Armeria-saml versions prior to 1.41.1 have a vulnerability that allows bearer assertions to be reused for authentication, exposing systems to potential replay attacks. This means previously used assertion IDs can be exploited within their validity period, compromising security and enabling unauthorized access to sensitive resources. It is crucial for users and administrators to upgrade to the latest version to mitigate this risk.

References