CVE-2026-11753 Details
Description
A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTTP Location header after successful authentication, allowing an unvalidated redirect to an attacker-controlled URL.
A vulnerability exists in the Armeria SAML library, specifically in versions prior to 1.41.1. The issue arises because the default SAML Single Sign-On (SSO) success handler reflects the attacker-controlled RelayState into the HTTP Location header after authentication. This reflection allows for an unvalidated redirect to an attacker-controlled URL. The vulnerability affects applications using the default SSO handler without a custom RelayState validation.
Users are advised to update the Armeria SAML library to version 1.41.1 or later.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/line/armeria/security/advisories/GHSA-89cp-657f-wp7v | [email protected] | AdvisoryExploitRemedyVendor |
| https://line.github.io/security-advisory-blog/CVE-2026-11753/ | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| LINE Armeria SAML | < 1.41.1 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 4, 2026 | New CVE Received | [email protected] |