CVE-2026-55789 | logto-io Logto up to 1.40.x SAML Response/Assertion Signing name/email/custom attribute-mapping values escape output

July 10, 2026 Yanac

A vulnerability was found in logto-io Logto up to 1.40.x and classified as problematic. This issue affects some unknown processing of the component SAML Response/Assertion Signing. Such manipulation of the argument name/email/custom attribute-mapping values leads to escaping of output.

This vulnerability is uniquely identified as CVE-2026-55789. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More