In short
- CVE-2026-54779 is a MEDIUM (CVSS 5.9) vulnerability affecting CoreWCF.Primitives.
- Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.8% of all vulnerabilities.
- Fix: update to 1.9.1, 1.8.1 or later.
| Package | Affected versions | Patched versions |
|---|
| CoreWCF.Primitives NuGet | ≥ 1.9.0, < 1.9.1< 1.8.1
| 1.9.11.8.1
|
Description
Impact
When enabling DetectReplayedTokens, a token can be replayed and will be detected despite it being reused.
Patches
Fixed in CoreWCF v1.8.1 and v1.9.1
Workarounds
Provide your own implementation of ITokenReplayCache with the correct behavior.
NVD description
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token replay protection is inoperative because DefaultTokenReplayCache.TryAdd does not reject duplicate tokens when DetectReplayedTokens is enabled, allowing a captured token to be reused. This issue is fixed in versions 1.8.1 and 1.9.1.
More vulnerabilities in CoreWCF.Primitives
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free