TracecatHQ vulnerabilities
We track 1 vulnerability in TracecatHQ products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest TracecatHQ vulnerabilities
- 9.8 Critical severity
tracecat: Improper Verification of Cryptographic Signature
Tracecat is an open-source security automation platform for teams and AI agents. From version 0.37.0 until 1.0.0-beta.49, Docker Compose deployments with SAML enabled can render SAML_SIGNED_ASSERTIONS and SAML_SIGNED_RESPONSES as empty values, overriding secur