CVE-2026-84114: Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication
A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.8.1.11 is recommended to address this issue. Upgrading the affected component is recommended.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cleo Harmony (SAML Authentication / LocalUserUtil.getNativeUserByAssertions)to a version that resolves this vulnerability.Fixed in 5.8.1.11
Event History
Frequently Asked Questions
Which deployments are affected?
Cleo Harmony versions up to and including 5.8.1.10 are affected in the SAML Authentication component.
What does an attacker need to exploit this issue?
The issue can be exploited remotely by manipulating the Email argument handled by LocalUserUtil.getNativeUserByAssertions. The vector indicates low attack complexity, requires low privileges, and does not require user interaction.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.
What is the recommended remediation?
Upgrade Cleo Harmony to version 5.8.1.11 and upgrade the affected component.