Vulnerability Description
The ruby-saml library is for implementing the client side of a SAML authorization. ruby-saml versions up to and including 1.12.4 contain an authentication bypass vulnerability due to an incomplete fix for CVE-2025-25292. ReXML and Nokogiri parse XML differently, generating entirely different document structures from the same input. This allows an attacker to execute a Signature Wrapping attack. This issue is fixed in version 1.18.0.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Onelogin | Ruby-Saml | < 1.18.0 |
Related Weaknesses (CWE)
References
- https://github.com/SAML-Toolkits/ruby-saml/commit/e9c1cdbd0f9afa467b585de279db0cPatch
- https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-9v8j-x534-2fVendor Advisory
- https://github.com/advisories/GHSA-754f-8gm6-c4r2Not Applicable
FAQ
What is CVE-2025-66567?
CVE-2025-66567 is a vulnerability with a CVSS score of 9.1 (CRITICAL). The ruby-saml library is for implementing the client side of a SAML authorization. ruby-saml versions up to and including 1.12.4 contain an authentication bypass vulnerability due to an incomplete fix...
How severe is CVE-2025-66567?
CVE-2025-66567 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-66567?
Check the references section above for vendor advisories and patch information. Affected products include: Onelogin Ruby-Saml.