CVE-2026-102899
Description
A flaw was found in Sentry. In the Security Assertion Markup Language (SAML) single sign-on (SSO) identity-linking flow, a remote attacker controlling an external identity provider can trick an authenticated user into visiting a crafted URL. In web browsers that accept cross-site cookies, this allows the attacker to associate their external identity with the victim's Sentry profile, leading to unauthorized account takeover.
Statement
This vulnerability affects the getsentry/sentry backend server installation, which is not shipped in Red Hat products.
Mitigation
A workaround is available for this issue: access Sentry using a Chromium-based browser with third-party cookies disabled, which prevents the browser from accepting the cross-site cookie context required for the attack (the affected configurations are browsers that honor SameSite=None cookies, such as Firefox, and Chromium-based browsers with third-party cookies manually enabled). For self-hosted Sentry installations, the upstream fix is available in version 26.7.2. Sentry is not shipped in Red Hat products, so no Red Hat product updates are required.
Understanding the Weakness (CWE)
Access Control,Other
Technical Impact: Gain Privileges or Assume Identity; Varies by Context
An attacker can access any functionality that is inadvertently accessible to the source.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
