CVE-2026-103314: Authentication Bypass by Capture-replay in Red Hat Red Hat Advanced Cluster Security 4

This vulnerability in Red Hat Advanced Cluster Security 4 involves the Central SAML authentication Assertion Consumer Service (ACS) endpoint not tracking used SAML assertion or response identifiers, enabling replay attacks. An attacker who acquires a valid signed SAML response that is still unexpired can submit it repeatedly to receive multiple distinct Central authentication tokens mapped to the same identity. This flaw allows authentication bypass through capture-replay of valid SAML responses.

Successful exploitation allows an unauthenticated attacker to reuse a valid signed SAML response multiple times to obtain multiple distinct authentication tokens for the same user identity. This leads to authentication bypass with high confidentiality and integrity impact, as unauthorized access to the system can be gained without valid credentials. Availability is not affected.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-103314 for current remediation guidance.