Account Hijacking Vulnerability in Mendix SAML Module

An attacker could gain unauthorized access to user accounts without credentials, potentially allowing them to impersonate operators and manipulate industrial applications or data through compromised SSO authentication.

This affects organizations using Mendix applications with SAML-based SSO for operator access and system authentication. Any facility relying on Mendix for supervisory control, data management, or operator authentication should prioritize patching. This includes water utilities, electric utilities, manufacturing facilities, and other enterprises using Mendix as part of their control system or operational application stack.

An attacker sends a malicious request to the Mendix SAML module during the SSO authentication handshake. By exploiting a flaw in SAML token validation, the attacker can bypass authentication and assume the identity of a legitimate user without providing valid credentials.