CVE-2026-126775— Social-auth-core 4.7.0 before 7.0.0 Login CSRF via SAML RelayState

Quick assessment

Affected

python-social-auth social-auth-core

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 7.0.0 版本之前的 Social-auth-core 4.7.0 版本中，SAML 后端存在登录跨站请求伪造（CSRF）漏洞。该漏洞会恢复未签名的 RelayState 参数中所指定的会话。攻击者可通过自动提交表单，将伪造的合法身份提供商（IdP）响应及 RelayState 参数发送至受害者的浏览器，从而将受害者登录至攻击者控制的账户，以窃取其输入的数据。

CVSS 4.2 · Medium Updated Nov 12, 2026

Possible ATT&CK Techniques 2 AI

T1538 · Cloud Service Dashboard T1190 · Exploit Public-Facing Application

Affected Version Matrix 2

Vendor	Product	Version Range	Status
python-social-auth	social-auth-core	`4.7.0< 7.0.0`	affected
		`7.0.0`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Social-auth-core 4.7.0 before 7.0.0 Login CSRF via SAML RelayState

Source: CVE Program / CVE List V5

Vulnerability Description

Social-auth-core 4.7.0 before 7.0.0 contains a login cross-site request forgery vulnerability in the SAML backend that restores sessions named in the unsigned RelayState parameter. Attackers can deliver their own valid IdP response and RelayState to a victim's browser via an auto-submitting form, signing the victim into the attacker's account to capture entered data.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

跨站请求伪造(CSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
python-social-auth	social-auth-core	4.7.0 ~ 7.0.0	-

II. Public POCs for CVE-2026-126775

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-126775

请登录查看更多情报信息。

Other References for CVE-2026-126775 (5)

https://github.com/python-social-auth/social-core/pull/2167 patch issue-tracking
https://github.com/python-social-auth/social-core/commit/7d9da571fc9ce8bd0003ccfcbfa8ed98c18bb640 patch
https://github.com/python-social-auth/social-core/releases/tag/7.0.0 release-notes
https://github.com/python-social-auth/social-core/security/advisories/GHSA-4pv2-52v7-vrfx vendor-advisory
https://www.vulncheck.com/advisories/social-auth-core-4.7.0-before-7.0.0-login-csrf-via-saml-relaystate third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-126775

IV. Related Vulnerabilities

Same vendor: python-social-auth

Same weakness: CWE-352