CVE-2025-46573 - CVE House
Back to Database
Status published High CVE-2025-46573

passport-wsfed-saml2 Has SAML Authentication Bypass via Attribute Smuggling

Vulnerability Description

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by tampering with a valid SAML response. This can be done by adding attributes to the response. Users are affected specifically when the service provider is using `passport-wsfed-saml2` and a valid SAML Response signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-46573

Credits & Attribution

No credits recorded in the NVD database.

References

More from auth0

View All →
CVE-2025-68129
Auth0-PHP SDK has Improper Audience Validation
Medium 6.8
CVE-2025-67716
Auth0 Next.js SDK has Improper Validation of Query Parameters
Medium 5.7
CVE-2025-67490
Auth0 Next.js SDK has Improper Request Caching Lookup
Medium 5.4
CVE-2025-65945
auth0/node-jws improper HMAC signature verification vulnerability
High 7.5
CVE-2025-58769
auth0-PHP: Improper File Type Handling in Bulk User Import
Low 3.3

Affected Vendor

Affected Software

passport-wsfed-saml2
Vulnerable Versions:
>= 3.0.5, < 4.6.4

Timeline

Official Publish: May 6th, 2025
Last Modified: May 7th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-287

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1556 Modify Authentication Process
Credential Access