PT-2026-25375 · Packagist+2 · Simplesamlphp/Xml-Security+1

Sideni + 1 · Published 2026-03-13 · Updated 2026-03-16 · CVE-2026-32600

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions xml-security versions prior to 2.3.1 xml-security version 1.13.9

Description The library lacks validation of the authentication tag length when decrypting XML nodes encrypted with aes-128-gcm, aes-192-gcm, or aes-256-gcm. This allows an attacker to brute-force an authentication tag, recover the GHASH key, and decrypt the encrypted nodes. It also enables the forging of arbitrary ciphertexts without knowing the encryption key. The GHASH key is a string of bits used in Galois/Counter Mode (GCM) for authentication. If static symmetric keys are used, these keys should be rotated as they may have been compromised. The issue can be exploited by observing XML parsing errors that occur after modifying the ciphertext.

Recommendations Update to xml-security version 2.3.1 or later. Update to xml-security version 1.13.9 or later.

Exploit

Fix

Weakness Enumeration

CWE-354

Related Identifiers

CVE-2026-32600

GHSA-R353-4845-PR5P

Affected Products

Simplesamlphp/Xml-Security

Xml-Security

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32600.json · Exploit
• https://github.com/simplesamlphp/xml-security/commit/fdc12449e959c610943f9fd428e95e3832d74c25 · Patch
• https://github.com/simplesamlphp/xml-security/security/advisories/GHSA-r353-4845-pr5p · Vendor Advisory
• https://github.com/simplesamlphp/xml-security/commit/cad6d57cf0a5a0b7e0cc4e4a5b18752e56eb1520 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-32600 · Security Note
• https://osv.dev/vulnerability/CVE-2026-32600 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r353-4845-pr5p · Vendor Advisory
• https://github.com/simplesamlphp/xml-security · Note
• https://twitter.com/CVEnew/status/2032605873374109786 · Twitter Post