VulnSocial

CVE-2025-47151Disclosure(entrouvert / lasso)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch entrouvert lasso systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

entrouvert CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-843

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • lasso

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
entrouvert
Products
lasso

2 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-09-08: 2Patch / Workaround · 2026-09-08: 1Technical Details · 2026-09-08: 209-08
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • CVE Brief@DailyCVEBrief
    Patch

    LOOK BACK: In May 2025 Talos found pre-auth RCE in Lasso, the C SAML library under mod_auth_mellon, LemonLDAP::NG, RHEL, Debian and Ubuntu. The fix shipped in August in a release naming no CVE. CVE-2025-47151 got its 9.8 in November. Ten months on: no exploit, no KEV. https://t.co/vzuU29DGqO

    Post summary

    The tweet reviews a pre‑authentication RCE affecting multiple SAML libraries, noting that a patch was released before the CVE was assigned and that no exploitation has been observed.

    1000072
    31 followersView on X
  • CVE Brief@DailyCVEBrief
    Disclosure

    Full Look Back: how a wildcard table entry named any_attributes let a string land where a hash table pointer belonged, a 20-year-old parser design, and why a silent fix split the distros. https://cvebrief.com/cve/cve-2025-47151/ https://t.co/XAjFaOuqTX

    Post summary

    The tweet provides a technical retelling of CVE‑2025‑47151’s root cause and historical context, rather than a proof‑of‑concept, exploit, or patch update.

    0000042
    31 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appentrouvertlasso2.5.1--
Appentrouvertlasso2.8.2--

Explore more

Back to dashboardentrouvert CVEslasso vulnerabilities