CVE-2026-9093: Critical severity Casdoor Casdoor vulnerability
In Casdoor versions 2.362.0 and earlier, the SAML service provider implementation does not validate the AudienceRestriction element in SAML assertions. The buildSp function in object/samlsp.go never sets AudienceURI on the gosaml2 SAMLServiceProvider struct and never inspects WarningInfo.NotInAudience. This allows assertions issued for other service providers to be accepted by Casdoor.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Casdoor SAML service providerto a version that resolves this vulnerability.Fixed in 2.362.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9093?
CVE-2026-9093 has a risk rating of 20, indicating a high severity level.
How do I fix CVE-2026-9093?
To fix CVE-2026-9093, upgrade to a version later than 2.362.0 where the AudienceRestriction validation issue is addressed.
What systems are affected by CVE-2026-9093?
CVE-2026-9093 affects Casdoor versions 2.362.0 and earlier.
What type of vulnerability is CVE-2026-9093?
CVE-2026-9093 is a validation vulnerability affecting the SAML service provider implementation.
What specific SAML element is involved in CVE-2026-9093?
CVE-2026-9093 involves the improper validation of the AudienceRestriction element in SAML assertions.