CVE-2025-34142 is an XML External Entity (XXE) injection vulnerability in ETQ Reliance on the CG (legacy) platform's /resources/sessions/sso endpoint. The vulnerability arises because the SAML authentication handler processes XML input without disabling external entity resolution. This flaw allows crafted SAML responses to reference external entities, potentially enabling attackers to read sensitive files or perform server-side request forgery (SSRF). The issue has been fixed by disabling external entity processing in versions SE.2025.1 and 2025.1.2.