The defect allows an unauthenticated attacker that can reach the SAML assertion consumer endpoint to submit a forged unsigned SAML response. Because the Docker Compose deployment renders the SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES configuration options as empty values, the application bypasses signature verification and accepts the forged response. The attacker can then receive a session for any existing Tracecat user, and if the target user has superadmin privileges, the attacker can take over the superadmin account. No new user accounts are created and the flaw does not affect default Fargate or Helm deployments.

Affected product is TracecatHQ's Tracecat platform. Versions from 0.37.0 up through 1.0.0‑beta.49 running Docker Compose with SAML enabled are susceptible. The vulnerability is not present in installations using default Fargate or Helm configurations, nor in other deployment methods.

With a CVSS score of 9.8, this flaw is considered critical. The EPSS score is not available but the nature of the vulnerability and lack of mitigations suggests a moderate to high exploitation likelihood. The flaw is not yet listed in CISA’s Known Exploited Vulnerabilities catalog. The attack vector is likely an unauthenticated network attacker who can reach the SAML assertion consumer endpoint; the vulnerability does not require privileged access or local compromise.