CVE-2026-12704 | Grafana Enterprise up to 13.2.0 SAML Library InResponseTo authentication replay

A vulnerability classified as critical was found in Grafana Enterprise up to 13.2.0. This affects an unknown function of the component SAML Library. Executing a manipulation of the argument InResponseTo can lead to authentication bypass by capture-replay.

This vulnerability is registered as CVE-2026-12704. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More