PatchTheCVEonelogin vulnerabilities
Recent CVEs affecting onelogin products. 6 tracked.
onelogin has 6 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-12-09. Highest priority: CVE-2025-25292 (score 72/100).
- CVE-2025-66567 CRITICAL 9.1 UPGRADE The ruby-saml library is for implementing the client side of a SAML authorization
- CVE-2025-66568 CRITICAL 9.1 UPGRADE The ruby-saml library implements the client side of an SAML authorization
- CVE-2025-25293 HIGH 7.5 UPGRADE UPGRADE ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby
- CVE-2025-25292 CRITICAL 9.8 UPGRADE UPGRADE ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby
- CVE-2025-25291 CRITICAL 9.8 UPGRADE UPGRADE ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby
- CVE-2024-45409 CRITICAL 10.0 UPGRADE UPGRADE The Ruby SAML library is for implementing the client side of a SAML authorization
FAQ
How do I fix onelogin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is onelogin being exploited right now?
None of the tracked onelogin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which onelogin CVE should I patch first?
CVE-2025-25292 currently ranks highest (72/100): ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby.