CoreWCF: SAML token replay protection is inoperative
Date: 2026-06
Affected: nuget/CoreWCF.Primitives, nuget/CoreWCF.Primitives
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2026-54779
CWE: CWE-294
CWE-613
CVSS: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)

### Impact When enabling DetectReplayedTokens, a token can be replayed and will be detected despite it being reused. ### Patches Fixed in CoreWCF v1.8.1 and v1.9.1 ### Workarounds Provide your own implementation of `ITokenReplayCache` with the correct behavior.


Mitigations:

Architectural layers (MAESTRO):