PT-2025-49774 · Ruby-Saml · Ruby-Saml

Published 2025-03-12 · Updated 2026-01-15 · CVE-2025-66567

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ruby-saml versions up to and including 1.12.4

Description The ruby-saml library, used for SAML authorization on the client side, has an authentication bypass issue. This is due to an incomplete fix related to a previous issue. Differences in how ReXML and Nokogiri parse XML can lead to a Signature Wrapping attack. The library generates different document structures from the same input when using these parsers.

Recommendations Update to version 1.18.0 or later.

Exploit

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-436

CWE-347

Related Identifiers

CVE-2025-66567

GHSA-754F-8GM6-C4R2

GHSA-9V8J-X534-2FX3

Affected Products

Ruby-Saml

References · 35

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66567.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/CVE-2025-25292.yml · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/CVE-2025-66567.yml · Exploit
• https://github.com/SAML-Toolkits/ruby-saml/commit/e9c1cdbd0f9afa467b585de279db0cbd0fb8ae97 · Patch
• https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-9v8j-x534-2fx3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-66567 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66567 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25292 · Security Note
• https://osv.dev/vulnerability/GHSA-754f-8gm6-c4r2 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9v8j-x534-2fx3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-66567 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-66567 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-66567 · Vendor Advisory
• https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-754f-8gm6-c4r2 · Note
• https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4 · Note