CVE-2026-58490 - Tracecat: Unsigned SAML response accepted in Docker Compose SAML deployments due to empty signing defaults
CVE ID :CVE-2026-58490 Published : Nov. 6, 2026, 8:17 p.m. | 54 minutes ago Description :Tracecat is an open-source security automation platform for teams and AI agents. From version 0.37.0 until 1.0.0-beta.49, Docker Compose deployments with SAML enabled can render SAML_SIGNED_ASSERTIONS and...