identity-authentication-vulnerabilitywidely-deployed-product-advisoryopen-source-dependency-vulnerability
GitLab Patches Critical SAML Account Takeover and Direct Transfer RCE Flaws
Vulnerability Disclosure · 3 sources · Updated 4mo ago · First seen Mar 19, 2025
GitLab released emergency updates for GitLab CE and EE to fix nine vulnerabilities, including two critical authentication flaws in the third-party ruby-saml library that can let an attacker impersonate arbitrary users in SAML SSO deployments. The issues, tracked as CVE-2025-25291 and CVE-2025-25292, stem from SAML parser differential behavior that can enable a valid SAML-signing party to bypass authentication checks and effectively sign in as another user. GitHub security researchers disclosed the underlying SAML weakness, describing how parser inconsistencies can break trust assumptions in SSO authentication flows.
Do you run this?See affected versions and whether adversaries are exploiting it.
Check your exposure
