Xml Security CVE-2026-32600

xml-security library versions before 2.3.1 processing XML messages encrypted with aes-128-gcm, aes-192-gcm, or aes-256-gcm algorithms. No authentication required; remote attacker can intercept and manipulate encrypted XML nodes in transit.

Despite the high CVSS score of 8.2, real-world exploitation risk appears moderate. The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates remote exploitation with no authentication required, which is concerning. However, no EPSS score is provided, suggesting limited observed exploitation activity. The vulnerability is not listed in CISA KEV, indicating no known active exploitation. The attack requires brute-forcing authentication tags, which while feasible, requires computational resources and may be detectable. The primary impact is confidentiality (C:H) with limited integrity impact (I:L), making this most critical for organizations handling sensitive data via SAML/XML encryption.

An attacker intercepts encrypted SAML assertions or XML messages between an identity provider and service provider. Without proper tag validation, they can manipulate the authentication tag and attempt brute-force attacks to recover the GHASH key. Once successful, they can decrypt sensitive user data, authentication tokens, or personal information contained in the XML. Additionally, they could forge malicious encrypted XML nodes that would be accepted as valid, potentially injecting false authentication claims or modifying user attributes. No public POC is referenced, but the attack is theoretically straightforward for skilled cryptographic attackers with access to encrypted traffic.