CVE-2026-45677

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 8.5.0 Rocket.Chat versions prior to 8.4.1 Rocket.Chat versions prior to 8.3.3 Rocket.Chat versions prior to 8.2.3 Rocket.Chat versions prior to 8.1.4 Rocket.Chat versions prior to 8.0.5 Rocket.Chat versions prior to 7.13.7 Rocket.Chat versions prior to 7.10.11

Description The SAML integration fails to verify the signature on inbound LogoutRequest messages. An unauthenticated remote attacker who knows a target user's SAML NameID (often the user's email address) can submit a crafted unsigned LogoutRequest to the SP logout endpoint. The server processes this request as legitimate and destroys the victim's session. This can be automated to target multiple accounts, potentially rendering the platform unusable for SAML-authenticated users.

Recommendations Update to version 8.5.0 Update to version 8.4.1 Update to version 8.3.3 Update to version 8.2.3 Update to version 8.1.4 Update to version 8.0.5 Update to version 7.13.7 Update to version 7.10.11