Prowler CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Prowler CVE published 2026-09-11

CVE-2026-100169

A vulnerability in Prowler's SAML authentication flow allows a malicious tenant to issue a token for the wrong tenant by asserting an email address from another configured domain, potentially leading to cross-tenant account takeover. The issue arises from the SAML ACS finish logic recalculating the tenant from the asserted user email domain instead of binding token issuance to the validated SAML configura [truncated]