CVE-2026-41694

Name of the Vulnerable Software and Affected Versions Spring Security versions 5.7.0 through 5.7.23 Spring Security versions 5.8.0 through 5.8.25 Spring Security versions 6.3.0 through 6.3.16 Spring Security versions 6.4.0 through 6.4.16 Spring Security versions 6.5.0 through 6.5.10 Spring Security versions 7.0.0 through 7.0.5

Description Spring Security SAML decrypts SAML Responses and elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature. This allows attackers to craft SAML payloads and use the Service Provider as a decryption oracle, which is a system that can be used to decrypt data by observing the responses to specifically crafted queries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.