CVE-2026-58490

The open-source security automation platform Tracecat is vulnerable in versions 0.37.0 through 1.0.0-beta.49 . In Docker Compose deployments with SAML enabled, the application may render SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES as empty values, overriding secure defaults and disabling sig...

EUVD-2026-118485

Tracecat is an open-source security automation platform for teams and AI agents. From version 0.37.0 until 1.0.0-beta.49, Docker Compose deployments with SAML enabled can render SAMLSIGNEDASSERTIONS and SAMLSIGNEDRESPONSES as empty values, overriding secure application defaults and disabling both...