CVE-2026-58490: Tracecat SAML bypass in Docker Compose

CVE-2026-58490 is a critical vulnerability in Tracecat, an open-source security automation platform for teams and AI agents. In Docker Compose deployments with SAML enabled, the configuration variables SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES render as empty instead of assuming secure defaults. This completely disables signature validation on SAML assertions. An unauthenticated attacker reaching the SAML assertion consumer endpoint can submit forged, unsigned SAML responses to hijack the session of any valid user in the system, including superadmin accounts.

The severity is CVSS 9.8 (critical): no prior authentication is required, impact is maximum on confidentiality, integrity, and availability. The vulnerability affects Tracecat from version 0.37.0 through 1.0.0-beta.48. Version 1.0.0-beta.49, published on NVD on 2026-11-06, completely removes the insecure behavior by restoring the mandatory requirement for valid signatures. The fix status is verified and available. Public signals confirm active community attention to this vulnerability.

For Tracecat administrators: update immediately to version 1.0.0-beta.49 or later. If Docker Compose with SAML is currently in use, verify in environment variables that SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES are set to true. If deployments use Fargate or Helm instead, risk is absent and no action is required. As a temporary mitigation before patching, disable SAML completely in Docker Compose deployments.

Tracecat is an automation platform for security teams and AI agents. When SAML is enabled, federated authentication becomes the critical mechanism controlling system access. A bypass of signature validation fundamentally transforms the security posture of affected Docker Compose deployments, exposing them to unauthorized account takeover.