Executive brief
Sentry's improper authentication on SAML SSO process allows user impersonation
Affected products
- PyPI sentry
Junglewise Threat Intelligence
CVE-2025-22146: PYSEC-2026-532 - Sentry's improper authentication on SAML SSO process allows user impersonation
CVE-2025-22146 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: sentry (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1916 - Sentry improperly authorizes muting of alert rules
- PYSEC-2026-1910 - Sentry improperly authorizes deletion of user issue alert notifications
- PYSEC-2026-1914 - Sentry vulnerable to stored Cross-Site Scripting (XSS)
- PYSEC-2026-1913 - Slack integration leaks sensitive information in logs
- PYSEC-2026-1911 - Sentry vulnerable to leaking superuser cleartext password in logs